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Abstract 



This paper exhibits a general and uniform method to prove completeness for certain 
modal fixpoint logics. Given a set F of modal formulas of the form j{x,pi, . . . ,pn), where 
X occurs only positively in 7, the language C^(r) is obtained by adding to the language 
of polymodal logic a connective jj^ for each 7 G F. The term \\^(ipi, . . . ,ipn) is meant 
to be interpreted as the least fixed point of the functional interpretation of the term 
7(x, ifi, . . . , ifn)- We consider the following problem: given F, construct an axiom system 
which is sound and complete with respect to the concrete interpretation of the language 
£|j(F) on Kripke frames. We prove two results that solve this problem. 

First, let Kjj(F) be the logic obtained from the basic polymodal K by adding a Kozen- 
Park style fixpoint axiom and a least fixpoint rule, for each fixpoint connective jj^. Pro- 
vided that each indexing formula 7 satisfies the syntactic criterion of being untied in x, 
we prove this axiom system to be complete. 

Second, addressing the general case, we prove the soundness and completeness of an 
extension Kj"(F) of Kjj(F). This extension is obtained via an effective procedure that, 
given an indexing formula 7 as input, returns a finite set of axioms and derivation rules for 
fj-y, of size bounded by the length of 7. Thus the axiom system K^(F) is finite whenever 
F is finite. 

Keywords, fixpoint logic, modal logic, axiomatization, completeness, least fixpoint, 
modal algebra, representation theorem 

1 Introduction 



Suppose that we extend the language of basic (poly-)modal logic with a set { fl^ | 7 G F } of 
so-called fixpoint connectives, which are defined as follows. Each connective {[7 is indexed by 
a modal formula 7(x,pi, . . . in which x occurs only positively. The intended meaning of 
the formula ^■yi^pi, ■ ■ ■ , ^fn) in a labelled transition system (Kripke model) is the least fixpoint 
of the formula j{x, fi, . . . , ipn), 

^■y{(pi, ... ,(pn) = fJ'X.-fix, (fi, . . . ,(fn)- 
'Research supported by the Van Gogh research project Modal Fixpoint Logics. 

^Laboratoire d'Informatique Fondamentale de Marseille, Universite de Provence, 39 rue F. Joliot Curie, 
13453 Marseille Cedex 13, France. Email: luigi.santocanale@lif.univ-mrs.fr 

"'"Institute for Logic, Language and Computation, Universiteit van Amsterdam, Plantage Muidergracht 24, 
1018 TV Amsterdam, Netherlands. Email: Y.Venema@uva.nl 



1 



Many logics of interest in computer science are of this kind: Such fixpoint connectives can 
be found for instance in PDL, propositional dynamic logic [13], in CTL, computation tree 
logic [llj . in LTL, linear temporal logic, and in multi-agent versions of epistemic logic [12J. 
More concretely, the Kleene iteration diamond (a*) of PDL can be presented (in the case 
of an atomic program a) as the connective [j^, where 6{x,p) is the formula p V {a)x: the 
formula {a*)<p can be interpreted as the parameterized least fixpoint ^x-^ix, (/?). As two more 
examples, let 9{x,p,q) := p V A Ox), and ri{x,p,q) := p V (g A Ox), then CTL adds new 
connectives ^eip, q),^r]ip, q) — or E{pUq), A{pUq) in the standard notation — to the basic 
modal language. 

Generalizing these examples we arrive at the notion of a flat modal fixpoint logic. Let 
jC(((r) denote the language we obtain if we extend the syntax of (poly-)modal logic with a 
connective [j^ for every 7 G F. Clearly, every fixpoint connective of this kind can be seen 
as a macro over the language of the modal /i-calculus. Because the associated formula 7 
of a fixpoint connective is itself a basic modal formula (which explains our name flat), it 
is easy to see that every flat modal fixpoint language is contained in the alternation-free 
fragment of the modal ^-calculus |19j . Because of their transparency and simpler semantics, 
flat modal flxpoint logics such as CTL and LTL are often preferred by end users. In fact, most 
veriflcation tools implement some flat fixpoint logic rather than the full /i-calculus, regardless 
of considerations based on the expressive power of these logics. 

Despite their wide-spread applications and mathematical interest, up to now general in- 
vestigations of modal fixpoint logics have been few and far between. In this paper we address 
the natural problem of axiomatizing flat modal fixpoint logics. Here the flat modal fixpoint 
logic induced by T is the set of £(j(r)-validities, that is, the collection of formulas in the 
language >Cj((r) that are true at every state of every Kripke model. 

In general, the problem of axiomatizing fixpoints arising in computer science is recognized 
to be a nontrivial one. As an example we mention the longstanding problem of axiomatizing 
regular expressions [U U\ [22l [20], whereas the monograph [6] is a good general survey on 
fixpoint theory. More specifically, in the literature on modal logic one may find completeness 
results for a large number of individual systems. We mention the work of Segerberg [36] and of 
Kozen &: Parikh [21] on PDL, the axiomatization of Emerson & Halpern [lOj of CTL, and many 
results on epistemic logic with the common knowledge operator or similar modalities [12^129]. 
In the paper [19] that introduced the modal //-calculus, Kozen proposed an axiomatization 
which he proved to be complete for a fragment of the language; the completeness problem of 
this axiomatization for the full language was solved positively by Walukiewicz [30] . But to our 
knowledge, no general results or uniform proof methods have been established in the theory 
of modal fixpoint logics. For instance, the classical filtration methods from modal logic work 
for relatively simple logics such as PDL [14J, but they already fail if this logic is extended with 
the loop operator [19]. A first step towards a general understanding of fiat fixpoint logics is 
the work [26j, where a game-based approach is developed to deal with axiomatization and 
satisfiability issues for LTL and CTL. 

In this paper we contribute to the general theory of fiat modal fixpoint logics by providing 
completeness results that are uniform in the parameter F, and modular in the sense that the 
axiomatizations take care of each fixpoint connective separately. Our research is driven by the 
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wish to understand the combinatorics of fixpoint logics in their wider mathematical setting. 
As such it continues earlier investigations by the first author into the algebraic and order- 
theoretic aspects of fixpoint calculi [Ml ES]) and work by the second author on coalgebraic 
(fixpoint) logics [MlliailS]. 

Usually, the difficulty in finding a complete axiomatization problem for a fixpoint logic 
does not stem from the absence of a natural candidate. In our case, mimicking Kozen's 
axiomatization of the modal /i-calculus, an intuitive axiomatization for the i2j(r)-validities 
would be to add, to some standard axiomatization K for (poly-)modal logic, an axiom for 
each connective ji-^ stating that tl7(pi, • • • ,Pn) is a prefixpoint of the formula 7(2;, pi, . . . ,p„), 
and a derivation rule which embodies the fact that '^^{pi, ■ ■ ■ ,Pn) is the smallest such. 

Definition 1.1. The axiom system Kj(r) is obtained by adding to K the axiom 
and the derivation rulJ^l 



for each 7 € F. 

In fact, the first of our two main results, Theorem 15. 4^ states that for many choices of F, 
Kn(F) is indeed a complete axiomatization. More precisely, we identify a class of formulas that 
we call untied in x — these formulas are related to the aconjunctive ^19j and disjunctive |[40] 
formulas from the modal /x-calculus. In this paper we shall prove that 

if every 7 in F is untied in x, then Kn(F) is a complete axiomatization. 

This result takes care of for instance the completeness of CTL. 

However, the road to a general completeness result for the system Kjj(F) is obstructed by 
a familiar problem, related to the role of conjunctions in the theory of fixpoint logics. Our 
solution to this problem comprises a modification of the intuitive Kozen-style axiomatization, 
inspired by a construction of Arnold & Niwihski [2]. Roughly speaking, this so-called Subset 
Construction is a procedure that simulates a suitable system of equations T by a system of 
equations that we will call simple since it severely restricts occurrences of the conjunction 
symbol. It is shown in [21 §9.5] that on complete lattices, the least solutions of T and may 
be constructed from one another. The key idea of our axiomatization is first to represent 7 
by an equivalent system of equations , and then to force the simulating system T+ to have 
a least solution, constructible from jj^, on the algebraic models for the logic. 

More concretely, we present a simple algorithm that produces, when given as input a modal 
formula j{x) that is positive in x, a finite set of axioms and rules, of bounded size. Adding 
these axioms and rules to the basic modal logic K, we obtain an axiom system K^(F), which 

^This rule is to be interpreted as stating that if some substitution instance 7('i/', 'fii, ■ ■ ■ , fn) ip oi the 
premiss is derivable in the system, then so is the corresponding substitution (^.((/Pi, . . . , (^n) — > 1/) of the 
conclusion. Algebraically, it corresponds to the quasi-equation 7(i/,pi, . . . ,p„) < y tt-y(pi, . . . ,Pn) < y 
(or to the Horn formula obtained from this quasi-equation by universally quantifying over the variables y and 

Pl,...,Pn). 



,Pn),Pl, ...,Pn)^ tl7(Pl, • • • ,Pn), 



(d^-prefix) 



7iy,pi, - ■ ■ ,Pn) -^y 



(ti-j.-least) 
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is finite if JC-^{T) has finitely many fixpoint connectives. Our second main result, Theorem l5.8[ 
states that, for any flat fixpoint language, 



Kj (r) is a complete axiomatization for the validities in C^{T). 



Let us briefly describe the strategy for obtaining the completeness theorem. We work in 
an algebraic setting for modal logic. Following a well known approach of algebraic logic, we 
treat formulas as terms over a signature whose function symbols are the logical connectives. 
Then, axioms correspond to equations and derivation rules to quasi-equations. The algebraic 
counterpart of the completeness theorem states that the equational theory of the "concrete" 
algebraic models that arise as complex algebras based on Kripke frames, is the same of the 
equational theory of the algebraic models of our axiomatization. To obtain such an algebraic 
completeness theorem, we study the Lindenbaum-Tarski algebras of our logic. Two properties 
of these structures turn out to be crucial: First, we prove that every Lindenbaum-Tarski 
algebra is residuated, or equivalently, that every diamond of the algebra has a right adjoint. 
And second, we show that the Lindenbaum-Tarski algebras are constructive: every fixpoint 
operation can be approximated as the join of its finite approximations. Then, we prove an 
algebraic representation theorem. Theorem 17. H stating that every countable algebra with 
these two properties can be represented as a Kripke algebra, that subalgebra of the 

complex algebra of a Kripke frame. Putting these observations together, we obtain that 
the countable Lindenbaum-Tarski algebras have the same equational theory as the Kripke 
algebras, and this suffices to prove the algebraic version of the completeness theorem. 

In order to prove these remarkable properties of the Lindenbaum-Tarski algebras, we 
switch to a coalgebraic reformulation of modal logic, based on the coalgebraic or cover modality 
V. This connective V takes a finite set a of formulas and returns a single formula Va, which 
can be seen as the following abbreviation: 



where Oa denotes the set { Oa \ a £ a}. The pattern of the definition of V has surfaced 
in the literature on modal logic, in particular, as Fine's normal forms ^13] . The first explicit 
occurrences of this modality as a primitive connective, however, appeared not earlier than 
the 1990s, in the work of Barwise & Moss [3] and of Janin & Walukiewicz [18]. We call 
this connective "coalgebraic", because of Moss' observation [30], that its semantics allows 
a natural formulation in the framework of Universal Coalgebra, a recently emerging general 
mathematical theory of state-based evolving systems |32j. Moss' insight paved the way for the 
transfer of many concepts, results and methods from modal logic to a far wider setting. As we 
will see, the main technical advantage of reconstructing modal logic on the basis of the cover 
modality is that this allows one to, if not completely eliminate conjunctions from the language, 
then at least tame them, so that they become completely harmless. This reduction principle, 
which lies at the basis of many constructions in the theory of the modal /i-calculus [18], 
has recently been investigated more deeply [311 [3], and generalized to a coalgebraic level of 
abstraction [241123]. 

We now briefly discuss how the present work contributes to the existing theory of fixpoint 
logics. Perhaps the first observation should be that our completeness results does not follow 
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from Walukiewicz' completeness result for the modal /x-calculus [40]: each language jCjj(r) may 
be a fragment of the full modal /U-calculus, but this does not imply that Kozen's axiomatization 
of the modal /i-calculus is a conservative extension of its restriction to such a language. In 
this respect, our results should be interpreted by saying that we add to Walukiewicz' theorem 
the observation that, modulo a better choice of axioms, proofs of validities in any given flat 
fragments of the modal /i-calculus can be carried out inside this fragment. 

And second, while our methodology is based on earlier work [35j by the first author, 
which deals with the alternation- free fragment of the /i-calculus, we extend these results in a 
number of significant ways. In particular, the idea to use the subset construction of Arnold 
& Niwihski to define an axiom system for flat modal fixpoint logics, is novel. Furthermore, 
the representation theorem presented in Section [7] strengthens the main result of [35] (which 
applies to complete algebras only), to a completeness result for Kripke frames. With respect 
to [35], we also emphasize here the role of the coalgebraic cover modality V in the common 
strategy for obtaining completeness. It is not only that some obscure results of [35j get a 
specific significance when understood from the coalgebraic perspective, but we also prove 
some new results on the cover modality V itself, which may be of independent interest. And 
lastly, we can place an observation similar to the one we made with respect to Walukiewicz' 
result for the full modal /u-calculus: the results in p5] do not necessarily carry over to arbitrary 
fragments that are flat fixpoint logics. In fact, we were surprised to observe that it turns out 
to be possible to find a finitary complete axiomatization of the fixpoint connective (j^ without 
explicitly introducing in the signature the least fixpoint of some other formula 5. This fact 
contrasts with the method proposed in [33] to equationally axiomatize the prefixpoints. 

Finally, our proof method and, consequently, all of our results apply to the framework of 
polymodal logic, and we have formulated our main results accordingly. However, since much of 
the material presented here requires some rather involved notation, we will frequently choose 
to work in the setting of monomodal logic, in order to keep the text as readable as possible. 
In those cases where the transition to the polymodal setting is not routine, we always provide 
explicit details of this transition. 

Overview of the paper. In Section [2] we first define fiat modal fixpoint logics and then 
introduce our main tools: the coalgebraic cover modality V, the algebraic approach to modal 
(fixpoint) logic, the order theoretic notion of a finitary 0-adjoint, and the concept of a system 
of equations. Section [3] is devoted to the axiomatization K^(r) which we present as an 
algorithm producing the axiomatization given as input a set F of modal formulas. In Section [J] 
we give the proof of some algebraic results that relate fixpoints of different functions and 
that are at the core of the axiomatizations Kjj(F) and Kj''(r). With these results at hand, 
in Section [5] we formulate our two soundness and completeness results, and we sketch an 
overview of our algebraic proof method, introducing the Lindenbaum-Tarski algebras L. In 
Section [6l we show that these Lindenbaum-Tarski algebras L have a number of properties 
that make them resemble the power set algebra of a Kripke frame: we prove L successively 
to be rigid, residuated, and constructive. Finally, in Section [TJ we prove the above-mentioned 
representation theorem stating that every countable, residuated and constructive algebraic 
model of our language can be represented as a subalgebra of a powerset algebra of some 
Kripke frame. 



5 



2 Preliminaries 



In this section we present some material that we consider background knowledge in the 
remainder of the paper. We first give a formal definition of the syntax and semantics of flat 
modal fixpoint logics. We then discuss the reformulation of modal logic in terms of the cover 
modalities Finally, we introduce modal jj-algebras as the key structures of the algebraic 
setting in which we shall prove our completeness result. For background in the algebraic 
perspective on modal logic, see [5} [38]. 

Flat modal fixpoint logic 

The flat modal fixpoint logic of language >Cj(r) will be an extension of polymodal logic. 
Therefore we shall use / to denote the finite set of atomic actions indexing the modalities of 
polymodal logic. Next - and throughout this paper - we fix a set T of polymodal formulas 
7(x,p) where the variable x occurs only positively in 7 and p = {pi, . . . ,pn) is the ordered list 
of free variables in 7 that are distinct from x. As usual x occurs only positively in 7 if each 
occurrence of x appears under an even number of negations. Alternatively, we may decide 
to present the syntax of polymodal logic so that negation applies to propositional variables 
only, in which case x occurs positively if it occurs under no negation. The vector p might be 
different for each 7, but we decided not to make this explicit in the syntax, in order not to 
clutter up notation. 

First we give a formal definition of the language of flat modal fixpoint logics. Basically 
we add a new logical connective ^-y to the language, for each 7 G F. 

Definition 2.1. The set >Cj(F) of flat modal fixpoint formulas associated with F is defined 
by the following grammar: 



where p G P is a propositional variable, i and 7 range over / and F, respectively, and (/? is a 
vector of previously generated formulas indexed by the vector p. 

We move on to the intended semantics of this language. A labeled transition system of 
type /, or equivalently a Kripke model, is a structure § = {S,{Ri \ i & I}), where S is a set 
of states and, for each i(^I,RiQSxS is a transition relation. 

Definition 2.2. Given a Kripke model S and a valuation v : P — 'P{S) of propositional 
variables as subsets of states, we inductively define the semantics of flat modal fixpoint for- 
mulas as follows: 



if ::= p \ ^Lp \ ipi ^ ip2 \ Oup I JJ^((p) 



bll 



v{p) 



= \m\v , 



WfiWv n \\(p2\\v , 

{ X G S" I 3y G 5 s.t. xRiy and y G } . 
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In order to define ||tt7(v)lli') l^t x be a variable which is not free in and, for Y <^ S, let 
{v,x Y) be the valuation sending x to y and every other variable y to v{y). We let 

= Hi^ I b(^'^)kv,x^Y) ^y}- (1) 

Observe that, by the Knaster-Tarski theorem |3_7], ([T]) just says that the interpretation of 
^^{(f) is the least fixpoint of the order preserving function sending Y to ||7(a;, ¥')ll{^;,a;^y)• 
The cover modality 

We will frequently work in a reformulation of the modal language based on the cover modality 
V. This connective, taking a set of formulas as their argument, can be defined in terms of 
the box and diamond operators: 

V$ := □ Y $ A /\ 0$ , 

where 0$ denotes the set {Oip \ if E <!>}. Conversely, the standard diamond and box modal- 
ities can be defined in terms of the cover modalities: 

Oip = \/{ip,T}, Dt^ = V0 VV{(/?} . (2) 

It follows from these observations that we may equivalently base our modal language on V 
as a primitive symbol. 

What makes the cover modality V so useful is that it satisfies two distributive laws: 

V($U{\/^})= \J V($U^''), (3) 

and 

V^AVf^ \/ V{v9AV|(v^,V')G^}, (4) 

where <I> M ^' denotes the set of relations i? C $ x that are full in the sense that for all 
E <I> there is a ip (z ^ with ((p, ^) € R, and vice versa. The principle ([3|) clearly shows how 
the cover modality distributes over disjunctions, but we also call ([4]) a distributive law since 
it shows how conjunctions distribute over V. 

Remark 2.3. For more information on these distributive laws, the reader is referred to |3T|l4]. 
or to [23], where these principles are shown to hold in a very general coalgebraic context. 
Although to our knowledge it has never been made explicit in the literature on automata 
theory, equation ^ is in fact the key principle allowing the simulation of alternating automata 
by non-deterministic ones within the setting of /^-automata [18j. We refer to ^17j for an 
algebraic, or to [24^ [25] for a coalgebraic explanation of this. 

As a straightforward application of these distributive laws (together with the standard 
distribution principles of conjunctions and disjunctions), every modal formula can be brought 
into a normal form, either by pushing conjunctions down to the leaves of the formula construc- 
tion tree, or by pushing disjunctions up to the root, or by doing both. In order to make this 
observation more precise, we need some definitions, where we now switch to the polymodal 
setting in which we have a cover modality \^ for each atomic action i. 
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Definition 2.4. Let X be sets of prepositional variables. Then we define the following sets 
of formulas: 

1. Lit{X) is the set { x, -ix \ x £ X } of literals over X, 

2. C\/{X) is the set of V -formulas over X given by the following grammar: 

(f ::= X I -ix |_L|(^V(^|T|99A99| S/i^ 
where x e X, i e I, and ^ C C^{X). 

3. 2?v(^) is the set of disjunctive formulas given by the following grammar: 

ip::= ±\ipVip\ ^AA 

where A C Lit{X), J I, and $j C 'D^(X) for each j E J. Note the restricted use 
of the conjunction symbol in disjunctive formulas: a conjunction of the form /\A A 
'^ill be called a special conjunction. 

4. 'P^{X) is the set of pure V -formulas in X, generated by the following grammar: 

::= T I /\A A V*, 

where A is a set of literals, $ = {<I>i |iG/}isa vector such that, for each i G /, is 
a finite subset of V\7{X), and V$ is defined by 

V*:=/\Vi$,. (5) 

Proposition 2.5. Lei X 6e a sei of proposition letters. There are effective procedures 

1. associating with each modal formula ip an equivalent V -formula; 

2. associating with each V -formula ip G Cy{X) an equivalent disjunctive formula; 

3. associating with each V -formula (/? € C^{X) an equivalent disjunction of pure V- 
formulas. 

Proof. Part 1 of the Proposition is proved by iteratively applying the equivalences of ([2]), 
whereas part 2 is obtained by using (j3D as well as the distributive law of classical logic to push 
non special conjunctions to the leaves. For part 3, we first construct a formula ip' € V\j{X) 
which is equivalent to ip. Using the fact that T is equivalent to ^{ T } V we can suppose 
that, within ip' , each special conjunction A Ajej^j^j is such that J = I. Then, we 
iteratively apply the distributive law ([3|) to ip' to push disjunctions up to the root. QED 

Rewriting modal formulas into equivalent disjunctions of pure V-formulas is not strictly 
necessary for our goals: we could work with disjunctive formulas only. However, we have 
chosen to consider this further simplification because it drastically improves the exposition of 
the next section. 
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Modal algebras and modal [t-algebras 

We now move on to the algebraic perspective on flat modal fixpoint logic. As usual in algebraic 
logic, formulas of the logic are considered as terms over a signature whose function symbols 
are the logical connectives. Thus, from now on, the words "term" and "formula" will be 
considered as synonyms. 

Before we turn to the definition of the key concept, that of a modal jj-algebra, we briefly 
recall the definition of a modal algebra. 

Definition 2.6. Let A = {A, _L, T, -i. A, V) be a Boolean algebra. An operation f : A A is 
called additive if f{aV b) = faV fb, normal if /_L = _L, and an operator if it is both additive 
and normal. A modal algebra (of type /) is a structure A = {A, _L, T, -i. A, V, {O^ \ i € /}), 
such that the interpretation <>f" of each action i € / is an operator on the Boolean algebra 
(^,^,T,-,A,V). 

Equivalently, a modal algebra is a Boolean algebra expanded with operations that preserve 
all finite joins. 

Let Z he a set of variables containing the free variables of a modal formula (p. If A is a 
modal algebra, then (f^ : A^ — > A denotes the term function of (f. Here A^ is the set of 
Z- vectors (or Z-records), i.e. functions from the finite set Z to A. Recall that if card(Z) = n, 
then A^ is isomorphic to the product of A with itself n times. Next, given 7 £ L, let us list 
its free variables as usual, 'y = ^{x,pi, . . . ,pn)- Given a modal algebra A the term function 
of 7 is of the form : A x A"^ ^ A. Given a vector 6 = (61, . . . , 6„) € A^, we let 7^ : ^ ^ vl 
denote the map given by 

7,^(a):=7^(a,&). (6) 

Definition 2.7. A modal ^-algebra is a modal algebra A endowed with an operation for 
each 7 G r such that for each 5, ti^(b) is the least fixpoint of 7^ as defined in ([6]). 

Note that modal {j-algebras are generally not complete; the definition simply stipulates 
that the least fixpoint exists, but there is no reason to assume that this fixpoint is reached 
by ordinal approximations. 

Recall that / : A — > B is a, modal algebra morphism if the operations (_L,T,-i 
A,{Oi [ i £ I}) are preserved by /. If j4 and B are also modal (j-algebras then / is a 
modal ^-algebra morphism if moreover each [J^, 7 G F, is preserved by /. This means that 

for each v G A" and 7 G F. A jj-algebra morphism is an embedding if it is injective, and we 
say that A embeds into B if there exists an embedding / : A — > B. 

In this paper we will be mainly interested in two kinds of modal {j-algebras: the "concrete" 
or "semantic" ones that encode a Kripke frame, and the "axiomatic" ones that can be seen as 
algebraic versions of the axiom system Kj*" to be defined in the next section. We first consider 
the concrete ones. 
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Definition 2.8. Let S = (S*, { i?j | z G / }) be a transition system. Define, for eacli i € I, 
the operation (Ri) by putting, for each X C S, {Ri)X = {yGS'|3x€X s.t. yRix}. The 
'^-complex algebra is given as the structure 

§« := {ns),0, 5,n, u, n, { (Ri) lie/}). 

We will also call these structures Kripke ^-algebras. 

Definition 2.9. Let A = {A, <) be a partial order with least element _L, and let / : ^ ^ A 
be an order-preserving map on A. For k (z uj and a € ^, we inductively define f^a by putting 
f^a := a and f^~^^a := f{f^a). If / has a least fixpoint then we say that this least 
fixpoint is constructive if ji.f = Vfceo; f^{-^)- ^ modal (1-algebra is called constructive if tt^(b) 
is a constructive least fixpoint, for each 7 G T and each h in A. 

Remark 2.10. Our terminology slightly deviates from that in [35], where the least fixpoint 
of an order-preserving map on a partial order is called constructive if it is equal to the join 
of all its ordinal approximations, not just of the uj first ones. 

0-adjoints and fixpoints 

We now recall the well known concept of adjointness, and briefly discuss its generalization, 
0-adjointness. 

Definition 2.11. Let A = {A,<) and B = {B,<) be two partial orders. Suppose that 
f : A ^ B and g : B ^ A are order-preserving maps such that 

/a < 6 iff a < gb, (7) 

for all a € ^ and b ^ B. Then we call (/, 5) an adjoint pair, and say that / is the left adjoint 
of, or residuated by, g, and that g is the right adjoint, or residual, of /. We say that / is an 
0-adjoint if it satisfies the weaker property that for every b ^ B there is a finite set Gf{b) C A 
such that 

/a < 6 iff a < a' for some a' £ Gf{b), 

for all a G ^ and b e B. 

Remark 2.12. The terminology '0-adjoint' can be explained as follows. Let T be a functor 
on the category of partial orders (with order-preserving maps as arrows). Call a morphism 
/ : <) — ' iB,<) a left T -adjoint if the map Tf : T{A,<) — > T{B,<) has a right 
adjoint G : T{A, <) — > T{B, <) in the sense of ([7]) above. Let now T be the functor 0f 
defined as follows. On objects, 0f maps a partial order (^4, <) to the set 0f(vl, <) of finitely 
generated downsets of (^, <), ordered by inclusion. Alternatively, 0f(A, <) is the free join- 
semilattice generated by {A, <). To become a functor, 0^ takes an arrow / : [A, <) — > iB,<) 
to the function 0f(/) that maps a subset X € 0f(^) to the set of points that are below some 
element of the direct image f{X). 

We leave it as an exercise for the reader to verify that an order-preserving map / is an 
0-adjoint, in the sense of Definition 12.111 iff it is a left 0f-adjoint in the sense just described. 
We write 0-adjoint rather than left 0j-adjoint in order to keep our notation simple. 
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Finally, observe that to define adjoints, T-adjoints, and 0-adjoints, we do not need the 
antisymmetric law of partial order, we can define these notions for quasi orders. 

It is well known that left adjoint maps preserve all existing joins of a poset. Similarly, one 

may prove that 0-adjoints preserve all existing joins of directed sets. 

0-adjoints are relevant for the theory of least fixpoints because of the following. If / : 
— > A is an 0-adjoint, say that V A is /-closed if y G V and a = (oi, . . . , a„) G Gf{y) 

implies ai € V for i = 1, . . . ,n. If is a family of 0-adjoints of the form / : A"^ — > A, say 

that V is ^-closed if it is /-closed for each f ^ T . 

Definition 2.13. A family of 0-adjoints T = {fi : A^^ — ^4 | i G / } is said to be finitary 
if, for each x € A, the least set jF-closed set containing x is finite. The 0-adjoint /" : A — > A 
is finitary if the singleton { / } is finitary. 

Clearly, if / belongs to a finitary family, then it is finitary. 

Proposition 2.14. If f : A — > A is a finitary 0-adjoint, then its least prefixpoint, whenever 
it exists, is constructive. 

See [35\ Proposition 6.6] for a proof of the Proposition. 

The next Proposition collects the main properties of finitary families of 0-adjoints. Roughly 
speaking, these properties assert that finitary families may be supposed to be closed under 
composition, joining, and tupling. 

Proposition 2.15. Let T he a finitary family of 0- adjoints on a modal algebra A. Suppose 
also that f,g Then Q also is a finitary family of 0-adjoints, whenever 

1. Q'^T, 

2. g = Tu{h}, f : Ax A^ — > A, g : A^ — > A, and h = f o {g x A^) : A^ x A^ — > A, 

3. g = TUih}, f,g : A^ — > A, and h = f \J g, 

4. g = {F -.A^ — > A^} and {-K^o F : A^ — > A\z(^Z]<ZT. 

Proof. Part 1 of the statement is obvious. For the parts 2 and 4, we invite the reader to 
consult |35t Lemmas 6.10 to 6.12]. For Part 3, observe that 

Gfyg{d)=Gf{d)hGf{d), 

where G/\D = {v/\u\v^G and it e D }. Thus, ii vq ^ A and 1^ is a finite ^-closed set 
with vq G V , then V/\, the closure of V under meets, is a finite ^-closed set with iiq G I^a- QED 

Systems of equations 

Definition 2.16. A modal system or system of equations is a pair T = {Z, {tz }z&z) where 
Z is a finite set of variables and tz G Csj{Z U P) for each z & Z. Such a modal system is 
pointed if it comes with a specified variable zq G Z. 
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Given a modal system T and a modal algebra A, there exists a unique function T : 
X — > such that, for each projection vr^ : A^ — > A, tTj; o = t^. We shall say 

that T"^ is the interpretation of T in A. Whenever it exists, we shall denote the least fixpoint 

of hy nz.T^ ■■ A^ — > A^ . 

In this paper we will be interested in modal systems where every term is in a special 

syntactic shape. 

Definition 2.17. In the monomodal setting, a term t G C.\i{Z U P) is semi-simple if it is a 
disjunction of terms of the form A A V^, where A is a set of P-literals, and each is a 

finite conjunction of variables in Z (where T is the empty conjunction). For such a term to 
be simple, we require that each ip £ ^ belongs to the set ZU {T}. In the polymodal setting, a 
term t is semi-simple (simple) if it is a disjunction of terms of the form A A AjeJ M^i' where 
J C / and each of the formulas in |J^- $j satisfies the respective above-mentioned condition. 

A modal system T = {Z, {tz }zez) is semi-simple (simple, respectively), if every term tz 
is semi-simple (simple, respectively). 

3 The axiomatization K^(r) 

The axiom system K^(r) that we will define in this section adds, for each 7 € F, a number 
of axioms and derivation rules to the basic (poly-)modal logic K. We obtain these axioms 
and rules effectively, via some systems of equations that we will associate with 7. Here is a 
summary of the procedure. 

0. Preprocess, rewriting 7(x) as a guarded disjunction of special pure V-formulas. 

1. Represent each such 7 by a semi- simple system of equations T^. 

2. Simulate by a simple system of equations . 

3. Read off the axiomatization for jj^ from . 

The aim of this section is to define and discuss this procedure in full detail — readers 
who only want to look at the definition of the axiom system can proceed directly via the 
Definitions 13.101 13.161 and 13.221 For the sake of readability we work mainly in the monomodal 
framework. 

Before carrying on, let us fix some notation to be used throughout this section. We 
shall use the capital letters X, Y, Z to denote sets of fixpoint variables. On the other hand, 
P will denote a set of proposition letters not containing any of these fixpoint variables. If 
r € i3v(^ U P) and { o"y | y € y } C Cy{X) is a collection of terms indexed hy Y ^ X, then 
we shall denote by cr such a collection, and by T[a /y] the result of simultaneously substituting 
every variable y ^Y with the term ay. 

Preprocessing 7 

Fix a modal formula "f{x) in which the variable x occurs only positively. First of all, for our 
purposes we may assume that each occurrence of x is guarded in 7, that is, within the scope 
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of some modal operator. In the theory of fixpoint logics it is well-known that this assumption 
is without loss of generality, see for example |40^ Proposition 2]. In order to give a quick 
justification, recall that our goal is to axiomatize the least prefixpoint of 7(x). If x is not 
guarded in 7, then we can find terms 71, 72, with x guarded in both 71 and 72, and such that 
the equation 

7(x,p) = (x A -ii{x,p)) V 72 (a;, P) , 

holds on every modal algebra. It is easily seen that, on every modal algebra, 7 and 72 have 
the same set of prefixpoints. Thus, instead of axiomatizing {j^, we can equivalently axiomatize 

(172 • 

Second, given the results mentioned in the previous section, we may assume that 7 is a 
disjunction of pure V-formulas (cf. Proposition 12. 5p . However, given the special role of the 
variable x, it will be convenient for us to modify our notation accordingly. We introduce the 
following abbreviation: 

Va^> := /\A A V$, 
in the case that A C Lit{X) and x does not occur in A. 

Definition 3.1. Given a set P of proposition letters and a variable x ^ P, we define the set 
of pure V/x -formulas in P by the following grammar: 

::= T I re I Va$ I x A Va$, (8) 

where A C Lit(P), and <I> is a set of pure formulas in P. 

Remark 3.2. Recall from equation [5] that, in the polymodal setting, V$ denotes the formula 
/\jgj\^<I>j, where $ is the vector {<I>j | i € /}. Now we can define the set of ^^-formulas in 
P, in the polymodal setting, by the following grammar: 

if ::= T \ X \ Va* | x A • 

Then basically, the algorithm for obtaining the axiomatization in the polymodal case works 
the same as in the monomodal case, with the polymodal nabla-operator V replacing the 
monomodal V. 

Convention 3.3. In concrete examples we will denote the set A in as a list rather than 
as a set, and write p rather than ^p. For instance we will write Vpq^ instead of Vjp -,g}<I>. 
Furthermore, we will write V<I> instead of \/0^- 

Lemma 3.4. Every modal formula 7 € C\r{P L) {x}) in which the variable x only occurs 
positively can he effectively rewritten as an equivalent disjunction 7' of pure V/x-formulas in 
P. Furthermore, if x is guarded in 7 then x is guarded in 7' as well. 

Proof. In Proposition 12.51 we saw that every modal formula 7 can be equivalently rewritten 
as a disjunction 7' of pure V-formulas. If x occurs only positively in 7, then this formula will 
have no subformulas of the form /\A A V$ with -ix G A. From this the lemma is immediate. 

QED 
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Example 3.5. Consider the formula {p A Ox) V (^p A 0{x A Ox)). Rewriting this as a 
disjunction of pure X^x-formulas, we obtain 



7(x) = Vp0 V Vp{x} V\^{ T, X A V{ T, X } } . 



(9) 



Step 1: from formulas to semi-simple systems of equations 

In the first step of the procedure, we represent a formula 7 as a semi-simple system of equations 
T^. Fix a modal formula 7(x) in which the variable x only occurs positively. Without loss 
of generality we may assume that 7 is a disjunction of pure \^-formulas, and guarded in x. 
Roughly speaking, to obtain the modal system we cut up the formula 7 in layers, step by 
step peeling off its modalities and introducing new variables for (some of) 7's subformulas of 
the form Va^. 

Definition 3.6. Let 7(x) € C\'{PU{ x }) be a disjunction of pure V^^-formulas, and guarded 
in X. We define SC^, the set of special conjunctions in 7, as the set of subformulas of 7 of the 
form SC'^ is the set of special conjunctions that occur in the scope of some V-formula. 

Furthermore, we define RSF^y := { 7 } u SC'^ as the set of relevant subformulas of 7. 

To see the difference between the sets SC'^ and SC-y, observe that 7 itself is a disjunction 
of special conjunctions. These disjuncts are elements of SC^, but we only put them in SC'^ 
if they occur as subformulas of 7 deeper in the formula tree as well. 

Example 3.7. With 7 the formula given by Q, we find that SC^ consists of the four formulas 



Of these, only ^4 makes it into SC'^, so RSF-y = {7,1/^4}. 

The system of equations Ty will be based on a set of variables that is in one-to-one 
correspondence with the set of relevant formulas. 

Definition 3.8. Let 7(x) € C\r{PU{ x }) be a disjunction of pure \^-formulas, and guarded 
in X. Let 



be a set of fresh variables (in one-to-one correspondence with the set RSF^), and let [ip/z] 
be the natural substitution replacing each variable with the formula ip. 

The key observation in the definition of the modal system Ty is that every disjunction of 
formulas in SC^ can be seen as the [t/j/z] -substitution instance of a semi-simple formula ip. 
For instance, in Example 13. 7^ writing 



V'2 
tp4 



Vp0, 

Vp{x}, 

\^{T,xA V{T,x}}, 
V{T,x}. 



Z = {z^\'ip e RSF^ } 



ip3 = '^{T,x A z^J, 



we have that ips = ipsii^i/ ^iPa]- 
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Lemma 3.9. For every formula tp S RSF^ there is a semi-simple formula ip such that 

Proof. Given a special conjunction in 7, each G ^> has one of the forms T,x,tlj, or 
X where ip is again a special conjunction. Let be the formula we obtain by replacing 
$'s elements of the form ij: and x Aip with and x A z^, respectively. It is immediate that 
V/<^^ = V/\_^[ip / z]. This takes care of the formulas ip € SC'^, while for 7, which can be written 
as a disjunction \/- (pi of special conjunctions, we can simply take the formula 7 := \/i ^i- It 
is easy to see that the obtained formulas are semi-simple. QED 

Definition 3.10. Let 7(3;) € /3v(^U{xJ-) be a disjunction of pure \^x-formulas, and guarded 
in X. For z = G Z, we write pz ■= ip-, and let Tz denote the term pz[z^/x\. We call the 
modal system 

:= {Z,{tz \ zeZ}) 
the system representation of'j. is pointed by the variable z.y. 

The reader will have no difficulties verifying that T-y is a semi-simple systems of equations. 

Example 3.11. For the formula 7 of the Examples I3.5|i37fl we obtain (writing z, rather than 
z^.) the following system Ty. As its variables it has the set {^^,^4 }, and its equations are 
the following: 

Zy = Vp0 V Vpiz^} V X^jT, Zy A Z4} 
Z4 = V{T,z^}. 

We call the modal system a representation of the formula 7 because the least fixpoints 
of and 7 are mutually expressible — for the precise formulation of this statement we 
refer to Proposition 14.11 below. Here we just mention the key observation underlying this 
proposition, which relates the (parametrized) fixpoints of to those of 7, as follows. 

Proposition 3.12. Let ^ he a modal formula in which the variable x only occurs positively, 
let A be a modal algebra, and v € a sequence of parameters in A. 

1. If a ^ A is a fixpoint 0/7^, then the vector {%lj^{a,v) \ t/j € RSFj} is a fixpoint of 

2. If {b^ \ ip ^ RSFj } is a fixpoint of {T^)v, then bj G A is a fixpoint of 7^. 

Proof. Immediate by the definitions. QED 

Since our main aim is to represent 7 by a simple set of equations, formulas 7 for which 
itself is already simple, are clearly of interest. We shall introduce in Section [5] classes of 
formulas, called untied and harmless, that have this property. If every formula 7 G F belongs 
to those classes, then we can prove that Kjj(F) is already a complete and sound axiom system. 
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Step 2: from semi-simple systems of equations to simple ones 

The second step of our procedure is based on the subset construction of Arnold & Niwihski [2]. 
The idea behind this construction is that, under some conditions, one may ehminate conjunc- 
tions from a system of equations T through simulating it by another system, T"*" . Roughly, the 
idea of the construction is that the variables of the system correspond to the conjunctions 
of the non-empty sets of variables of the system T. 

Convention 3.13. Given the set of variables Z , we let Y = {ys \ S € T^{Z) } be a set of 
new variables in bijection with the set of non empty subsets of Z. For S € V+{Z), we 

denote by zs the term f\ S, and let [z/y] denote the substitution which replaces each variable 
y = ys ^ Y with the term zs- 

The following lemma is the heart of the simulation construction. 

Proposition 3.14. Let {rj \ i £ 1} be a finite collection of semi-simple terms in Z. 

1. There is a semi-simple term t in Z which is equivalent to /\^^jTi. 

2. There is a simple term a in Y, such that the term a[z/y] is equivalent to /\^^jTi. 

Proof. We give the proof in the monomodal setting. The first part of the lemma follows easily 
from successive applications of the distributive law (jl]) for the cover modality. Obviously it 
suffices to prove that the conjunction of two semi-simple terms A V$ and /\A A V<I>' 
is semi-simple. But by and the distributive law of classical propositional logic, this 
conjunction is equivalent to some formula /\(A U A') A V^*, where each formula ^/^ € ^' is of 
the form (/? A (/?', with 93 G $ and (p' € and thus itself a finite conjunction of variables in 
Z. In other words, the formula /\(A U A') A V^* is equivalent to a semi-simple formula. 

The second part of the proposition is an almost immediate consequence of the first, by 
the observation that with every semi-simple term r we may associate a simple term a such 
that r is equivalent to the term a[z/y]. The term a is obtained from r simply by replacing, 
for each disjunct A A V<I>, each formula /\S £ ^ (with 5 7^ 0) by the variable ys- QED 

Remark 3.15. It should be immediate to see how modify the above proof for the setting 
of polymodal logic. Indeed, recall first from Remark 13.21 the definition of the polymodal V. 
Trivially, one has 

/\ A A V* A /\ A' A V* = /\(A U A') A /\ A Xl^i , 

so that, by applying first the laws ([!]) for each and then the distributive law of classical 
propositional logic, a fundamental distributive law for the polymodal V may also be derived. 

Definition 3.16. Let T = {Z, {t^ \ z € Z}) he a semi-simple modal system. For any y £Y, 
writing y = ys with S € 7^{Z), let ay be the simple term corresponding to the conjunction 
Azgs'^^! ^ provided by Proposition I3.14[ The simulation of T is defined as the system of 
equations 

T+ := {Y,{ay\yeY}). 
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Example 3.17. Continuing Example 13. IH we may write 

z^Az4 = (%0 A V{T,z^}) V (^^{z^} A V{T,2;^}) V (\^{T,z^ A Z4} A V{T,z^}) 
= _L V V X^{T, A 2:4, z^} 

where we have used some "V-arithmetic" to simpUfy the outcome. 
Thus we obtain the following as the system T^: 

= Vp0 VVp{y^} V\^{T,y^4} 
y4 = V{T,y^} 
y-fi = Vp{y^} V \^{T, y^4, y^} . 

Here we write y-y instead of y{-y}, etc. 

For a more elaborate example, consider the following. 

Example 3.18. Let T be the semi-simple modal system given by 

Zl = Vpg{Zl A Z2,Zl A Z3} Wpg{Z2} 

Z2 = ^,{Zl,Z3} 

Z3 = V{z2 A Z3} . 

Using the distributive laws for V and some further V-arithmetic, one may derive that 

Z1AZ2 = Vpg{zi A Z2, Zl A Z3} y Vpg{zi A Z3, zi A Z2 A Z3} 

yVpg{zi A Z2, Zl A Z3, Z1AZ2A Z3} 

Z1AZ3 = Vpg{zi A Z2 A Z3} V S^q{z2 A Z3} 

Z2AZ3 = Vp{z2 A Z3, Z1AZ2A Z3} 

Z1AZ2AZ3 = Vpg{zi A Z2 A Z3} . 

From this it is easy to see that the simulation is given by 



2/1 


= %<?{2/12, 2/13} V Vpq{y2} 


2/2 


= Vp{yi,y3} 


2/3 


= V{y23} 


2/12 


= %q{yi2, 2/13} V ypg{yi3,yi23} V ypg{yi3,yi23} 


2/13 


= '^<?{2/l23} V'^g{y23} 


2/23 


= '%{2/23, 2/123} 


2/123 


= Vpg{yi23} , 



where we write yi2 for y{i,2}) etc. 

The relation between the modal systems T and is perhaps clarified by a diagram. Let, 
for some modal algebra A, : — > A^ be given by 

i^ia)iys) = /\ a,. (10) 
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Then Proposition I3.14l f2) maybe understood as stating that, given a semi-simple system T, 
there exists a simple system such that, for every modal algebra A and every parameter 
V G A^ , the diagram 



A^ 



A 



(11) 



A^ 



A 



Y 



commutes. 

On complete modal algebras, the modal systems T and are equivalent in the sense 
that the respective least fixpoints are mutually definable — this is in fact the point behind 
the introduction of T"*" in p]. In general however, the relation between T and T"*" seems to be 
less tight than that between the formula 7 (or rather, the system ({ 2; }, { 7 })) and the system 
T^. In the next section we discuss this relation in more detail: here we confine ourselves to 
the following basic observation concerning fixpoints of T and T-y . 

Proposition 3.19. Let T he a semi-simple modal system, let A he a modal algebra, and 
V G A^ a sequence of parameters in A. If {az \ z £ Z } is a fixpoint ofT^, then {/\{az \ z G 
5} I G T^iZ) } is a fixpoint ofT^. 



Proof. Immediate by (llip and the definitions. 



QED 



Step 3: read off the axiomatization 

We are now ready to define the axioms and derivation rules that we associate with a formula 
7(x,p) in which the variable x occurs only positively. As we will see, these axioms and rules 
can be easily read off from the simple modal system that we obtained in the previous 
step of the procedure. Before going into the syntactic details, let us first take an algebraic 
perspective. 

Let A be a modal jj-algebra, and let v G A^ be a sequence of parameters in A. Since 
is the least fixpoint of the map 7^ : A — > A, it follows from Proposition 14.11 below that the 
vector 

{iP'^{^v,v)\ipeRSF^} (12) 

is the least fixpoint of (T^)^. In order to arrive at a succinct presentation of our axiom 
system, it will be convenient to think of the coordinate ■-f^{^v,v) of (jl2p (that is, the case 
where = 'j (z RSF^), as the fixpoint jjt) itself — this is allowed since ^ is a modal ft-algebra. 
For this purpose we introduce the following notation, using the one-to-one correspondence 
between the sets Z and RSF^: 

_ f X if = 7, 
' \ tpz otherwise. 
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We may conclude that on any modal [j-algebra A, the set 



{xfilv,v)\zGZ} (13) 
is the least fixpoint of (X^)i,. Then on the basis of Proposition 13.19^ the set 

{ /\xf{^v,v) I SeniZ)} (14) 



IS some fixpoint of {T+)^. In case A is a complete algebra, the results of Arnold & Niwinski [21 
§9] imply that p4|) is in fact the least fixpoint of (T^)^. For a general j:t-algebra, however, 
we have no justification for drawing this conclusion. This means that the following is a 
meaningful definition. 

Definition 3.20. A modal (J-algebra A is called regular if for each 7 G F and each v G A^, 
the set ([HI) is the least fixpoint of (T^)^. 

We can now give an intuitive introduction of the axiom system K^(r) by saying that it 
expresses the regularity of modal [|-algebras. In other words, our axiomatization requires that 
the set ([HI) is the least fixpoint of (T^)^. Thus the above-mentioned result by Arnold & 
Niwinski will imply the soundness of the axiomatization. 

Example 3.21. Continuing Example 13.171 we find that Xo = ^ Siiid xa = V{T,x}. Our 
axiomatization will express that, for any formula (/? (corresponding to the sequence v of 
parameters), the vector 

ttv' \ / xoWIx\\'4'Ip\ 
v{T, = xSp/x\W/p\ 

tJ(^ A V{T, j V (xo A xa) W/x] [^/p] 

is the least fixpoint of the system T^[i^/p\. It suffices for our axiom system to express this for 
the proposition letter p: a uniform substitution will then take care of the parameter ip (see 
footnote [1] on how we formulate and interpret derivation rules). Recall that the following u-y, 
(T4 and £7^4 are the terms of the system T+: 

cr^ = Vp0 V Vp{y^,} V ^^{~T, y^4} 
(74 = V{T,y-y} 

0-74 = ^p{y-i]\/ ,y-iA,y-i] ■ 

Thus our axiomatization will contain the axioms 

Vp0 V Vp{H V ^,{'y,p^ v{T, HI ^ Bp (A) 

V{T,H^V{T,M (^4) 
Vp{ttp} V Vp{-T, p A V{T, Hp} ^ P A V{T, ^p] {A^^) 
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tip 

stating that | V{T,tjp} j is a prefixpoint of the system T^, and the derivation rules 
:p A V{T, ttp} 



ttp ^7 

V{T,H^y4 

Wp0 V '^{^7} V \^{T, y^4} ^ V{T, y^} y^ Vp{y^} V X^jT, y^4, y^} ^ y^4 



(-R74) 



p A V{T,(jp} ^ y^4 
expressing that this same vector is the least of the prefixpoints of . 

In order to address the general case, we discuss some notational issues. Given S € T^{Z), 
let Xs denote the following formula 

and, as usual, let be the vector of terms {^5 | S € 7^(Z)}. Using the one-to-one corre- 
spondence between the sets Y and we let [xV?/] denote the substitution which replaces 
each variable y = ys with the formula x^s- Furthermore, recall that {its' | S € T\.{Z) } is the 
vector of terms of the modal system . 

Definition 3.22. The axiom system Kj''(7) is obtained by adding to the axiomatization 
K[|(7) of Definition II. H for each S S T^{Z), the following axiom: 



as well as the following derivation rule: 



Xs 



Xs ys 



(As 



(Rs) 



Finally, the axiom system Kj''(r) is obtained as the union of all the axioms and inference 
rules of the axiom systems K.f('~f), 7 G F. 



Remark 3.23. Strictly speaking, we no longer need the axiom (jj^-prefix) and the rule 



(tJ7-least) since it can be proved on the basis of Proposition 14.21 and the results in Section [6l 



((i^-prefix) and (tt7-least) from Ku"(F). 



that ( j:j^-prefix ) is derivable and that (tt7-least ) is admissible in the system obtained by deleting 
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Remark 3.24. It is not hard to see that the number of rules and axioms that we add to 
Kj(r) in order to obtain K^(r) is in one-one correspondence with the set of non-finite subsets 
of RSF-y, and thus exponential in the size of the formula 7, provided that 7 has already been 
pre-processed, that is, 7 is a disjunction of pure V-formulas. However, the pre-processing 
procedure itself, rewriting a modal logic formula into this normal form, involves (at least) an 
exponential blow-up. We conjecture that the two steps of the procedure could be merged into 
one single algorithm which would produce an axiomatization of size exponential in the size of 
the original formula. We did not pursue this matter further since for our purposes it suffices 
to see that the axiomatization is finite, and because we believe that for clarity of exposition 
our separation of the various steps in the procedure is preferrable. 

Theorem 15.81 in Section [5] states the soundness and completeness of the axiom system 
Kp'(r) with respect to the Kripke semantics of >Cjj(r), and in the same Section we give an 
overview of the proof of this result. 

4 Comparing least fixpoints of systems of equations 

This section is devoted to the proof two rather technical results relating the existence and 
nature of the least fixpoints of the formulas and systems of equations that we discussed in the 
previous section. The first proposition substantiates our claim that the semi-simple system 
of equations T^, obtained in step 1 in the procedure, represents the original formula 7, in the 
sense that in any modal algebra A, the (parametrized) least fixpoints of 7 and those of 
can be derived from one another. 

Proposition 4.1. Let j be a modal formula in which the variable x only occurs positively, 
let A be a modal algebra, and let v G A^ be a sequence of parameters in A. 

1. The least fixpoint fiz-{T.^)v exists iff the least fixpoint fJ^x-lv exists. 

2. If existing, these least fixpoints CLTC TclOitcd QjS follows. W^vitifig /x^^.^^ — o (iiid jiz-i^^^v — 
{bz \ z E Z}, we have 

a = b,^, (15) 
b,^=i^^{a), foralli^eRSF-,. (16) 

3. If fj,z-(T^f)v is constructive then so is fJ.x-"fv- Conversely, if fix -7 v ^-^ constructive, then, 
provided the operations in 7 are continuous, fiz-{T^)v is constructive as well. 

Proof. Fix 7, A and v as in the statement of the proposition. In order to simplify notation, 
we write 7 rather than 7^, and T rather than {T^)^. 

First assume that exists, say a = ^x-1^- It follows from Proposition 13.121 that the 

vector {V'^(a) | G RSF^} is a solution of T"^. To see that it is in fact the least solution, let 
{b^ I ■0 £ RSF^} be another solution of T^. Then, again by Proposition 13. 121 is a solution 
of the equation x = j^{x), and hence by assumption on a, we find a < b^. From this, a 
formula induction shows that 'ip'^{a) < b^, for each ip G RSF^. This proves the direction (=>) 



21 



of part 1, and the equation of part 2. The other direction of part 1, and the equation 
(jlSp of part 2 have a similar proof. 

For the proof of part 3, we consider the approximating sequences {(7'^)"(_L) | n E and 
{(T^)"(_L) \ neuj}. Abbreviate Cn := (7^)"(-L) and t„ := 7r^^((T^)"(-L)). The main claim 
in the proof is the following. 

Claim 1. The sequences (c„)„ga; and (tn)nGa; are mutually cofinal: 

1. For all n € ti^ there is an m € w such that tn < Cm- 

2. For all n G a; there is an m € w such that Cn < tm- 

Proof of Claim. For the first statement of the claim, by induction on n we prove that 

for all n G : r"(±) < { V(7"(^)) I G RSF^ } . (17) 
The base case is immediate by the fact that T'^(_L) = _L. Inductively, for x £ RSF^ we have 

< x[^[7n±)/rc]/z] 
= X(7"a))- 

This proves (jl7p . and so in particular we obtain 

for all n G a; : tn+i = vr^(r"(±)) < 7(7"(^)) = 7"+'(^) • 

From this the first part of the claim is immediate. 

Part 2 of the claim is a little harder to prove. Given a modal formula 99, let d{ip) denote 
the modal depth of 99, and put k := ^(7). Then by induction on n we prove that 

for all n G a; : c„ < t^n ■ (18) 

Whereas the base case of (jlSp is immediate by the fact that cq = -L, for the inductive case 
we need a subinduction to prove the following. 

for all X G { X } U RSF^: x^(c„) < 7r^(r^-"+'^(>^)(±)) , (19) 

where we let tTx denote vr^^ . 

The proof of (I19p proceeds by induction on the depth of x- For the base step we must have 
X = X. So in this case we see that x^{cn) = c„, while 7r;^(r''"'+°(_L)) = 7rz^(r''"(_L)) = tkn, 
where the latter equality is nothing but the definition of tkn- So in this case, (flO]) follows 
from the main inductive hypothesis. 

For the inductive step, fix a formula x ^ RSF^. We may write x = x(V'i) • • • > V'n), where 
each ipi € RSF^ has depth properly smaller than d{x)i and x = ^ depth 1 formula such 
that 

for ah a £ ,x'^{a^„ ■ ■ ■ ,a^J = 7r^{T{a)) . (20) 
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Then we obtain 

X^(cn) = (cn), • • ■,'4'nicn)) by definition of x 

< x^(^^,(r'="+'^('^i)(±)), . . . ,7r^jr'="+<'^")(±))) by the IH 

< • • . , vrv,„(T^"+"(^)-^(±))) by monotonicity 
= TT^ (r(T^'"+'^(x)-i (±))) by ([20]) 
= ^x(r'="+'^W(±)), 



which proves l\19\) . 

To obtain the inductive case of (jlSp from this, take x := 7 in (|19p . This gives 



Cn+l = 7(Cn) < 7r^(r'="+'^(^)(±)) < (r('=+l)« (±) ) = ^k+l)n, 

as required. 

It easily follows from Claim [1] that 

\J Cn exists iff \J tn exists; and if existing, \f Cn = \J tn ■ (21) 

Now suppose that T has a constructive fixpoint fiz-T = \/ ^^^T'^{-L). It follows from 
part 1 that fix-^ exists and that /ia;-7 = T^-rifJ-z-T). But by the continuity of the projection 
operation vr^ we obtain that n^diz-T) = \/^^^-Ky{T'^{A-)) = Vnew^"' ^^'^ ^° ([2T|) we may 
derive that fj.^-^ = Vnew That is, 7 has a constructive fixpoint indeed. 

Conversely, suppose that 7 has a constructive fixpoint: ;^x-7 = VnGt^; (-*-)' write c^j := 
//a;. 7. Then by (fT6|) . /U^.T = {^"^(c^^) | ^ RSF^}. But if all the operations in 7 are 
continuous, then each £ RSF-y is continuous, implying that 

Then it follows from (jl9p and the continuity of the projections that 

Since this applies to all formulas tjj E RSF-y we obtain that 



T{\J r\±)) = \J T-{±). 



In other words, T has a constructive fixpoint as well. QED 

The second proposition in this section relates the least fixpoint of a semi-simple system 
of equations to that of its simple simulation. It justifies the third step in the procedure of 
defining the axiomatization which we defined in the previous section. 
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Proposition 4.2. Let T be a semi-simple modal system, let A be a modal algebra, and v G 
a sequence of parameters in A. 

1. If A is complete, then ^iz-T^ and fiY-{T~^)^ both exist, and they are related as follows. 
Writing fiz-T.^ = {^z \ z G Z} and fj,Y-{T~^)v — {by I V £ Y}, we have: 

a-z = for z £ Z 

hs = KzdS for S G V+{Z) . 

2. If ^Y-{T~^)v exists and is constructive, then nz-T^ exists, and is constructive as well. 
Writing, again, fJ-z-T^ = {a^ \ z £ Z} and /xy.(r+):^ = {by \ y G Y}, we have: 

iz = ^{^} for z £ Z . 

Proof. Part 1 of the proposition is the main statement of Arnold & Niwihski in [2j §9]. 

Part 2 is a special case of Lemma 14.31 below. Too see why we may apply this lemma, 
take P := A^ , Q := A^ , and let / and g be the maps and (T^)^, respectively. Let 
as m PU]). and let tt : ^ be given by 

7T{b){z) := b{,} . 

Then it is obvious that all maps involved are order preserving, that t(_L) = _L, and that 
7r(i(a)) = a, for all a G A^ . It is straightforward to prove that l is continuous, and, finally, 
we already discussed the commutativity of the diagram (jlip . qed 

We have isolated the following lemma from the proof of the previous Proposition since it 
may have some independent interest. 

Lemma 4.3. Let P, Q be posets with a least element _L and consider a commuting diagram 
of the form 

f 

P ^P 

Q 

where f and g are order preserving, and l is continuous and preserves _L . Moreover, suppose 
that there exists an order preserving vr : Q — > P such that tt o l is the identity on P. If g has 
a constructive least prefixpoint fi.g, then f has also has a constructive least prefixpoint ji.f 
given by the formula 

l^-f = 7r(/i.c/) • 

Proof. We shall prove that, for each ordinal a, the following holds: 

if c/"(_L) exists, then /'^(_L) exists, and t(/"(-L)) = 5"(-L). (22) 

Let us first see how to derive the Lemma from this. To start with, we may infer from (j22|) that 
for all a such that exists, we have = 7r(i(/°(±))) = 7r(5°(±)). So if g^+^{±) = 
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g'^{±), then we immediately obtain that Z^+H-L) = 7r(5'^+H±)) = '^{d'^i^)) = /"^(-L)- In 
other words, if fi.g is constructive then so is /u./. 

We prove (j22|) by ordinal induction on a. If a = 0, then i(/°(-L)) = g^{±) amounts to 
saying that l preserves the least element. If a is a successor ordinal /? + 1, then the existence 
of /"(-L) is not an issue. The second part of (j22p follows from 

.(r (±)) = iififim = 9{<f{m = ^(/a)) = g^i^) • 

Here the second identity follows by the commutativity of the diagram, and the third identity, 
by the inductive hypothesis. 

If Q is a limit ordinal then we will prove first that the approximant /"(-L) exists. We will 
actually show that vr(c/"(_L)) = V/3<a /^(-L), so that 7r(c/"(_L)) = /"(.L). Observe that, for 
p < a, < implies f^{±) = ^(/(±)) < vr(c/"(±)). Also, if < x for ah 

/? < a, then /(_L) = i(/^(±)) < i{x), hence ^"(X) < l{x) and 7r(5"(±)) < 7t{l{x)) = x. We 
are now ready to argue that i{f°^{l.)) = g°^{l.): 

/3<a /3<o /3<a 

where we need l to be continuous in the second identity. QED 

5 Soundness and Completeness 

In this section we state the two main soundness and completeness results of the paper, and 
we outline the proofs. 

As mentioned already, our completeness proofs are algebraic in nature, crucially involving 
the Lindenhaum-Tarski algebra L^(X) associated with a system S of axioms and deductive 
rules, and with a set X of variables. In the next two subsections S will denote Kji(r) and 
Kj'"(r), respectively, and, if S and X are understood, we shall write simply L in place of L^(X). 
The definition of L is based on the standard construction of an algebra from the syntax of a 
logic [5] . The elements of this algebra are equivalence classes of the formulas /terms that are 
generated from the set X of variables. Here two terms t, s are declared to be equivalent if 
h t <-> s is derivable in the system S. The operations of our Lindenbaum algebra also have a 
standard definition. For example we shall have 

[t] [s] = [tAs\ 

or, for the fixpoint connective [|^, 

^^([ti],...,[tn\) = [U^l,...,tn)\- 

Clearly, for the correctness of the latter definition we use the fact that the congruence rule 

{ Sj <— > tj }l<j<n 
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is derivable in Kn(r) — and a fortiori in K^(r) — as a straightforward derivation reveals. 

Lindenbaum-Tarski algebras are of fundamental importance, both logically and alge- 
braically. In logic, they are the algebraic incarnation of the associated derivation system 
S, in the sense that two formulas s and t are equivalent with respect to S iff the equation 
s = t holds in the algebra L^(X) (provided that X contains all the variables occurring in s 
and t). Algebraically, they are the free algebras in the class of algebraic models for the logic. 

More specifically, in our setting, both h^>^^\X) and L^ti ^'^\x) are modal ^-algebras, and, 
moreover, the latter algebra is regular. Also, in both cases, there is a canonical interpretation 
of the variables in X as elements in L, sending the variable x to the equivalence class [x] of the 
term x. Now first let L be L^ti('"^(X) and observe that whenever ^ is a modal (J-algebra and 
V : X — > A is a valuation of the variables in x as elements of A, then there exists a unique 
modal (|-algebra morphism / : L — > A such that f[x] = v{x) for all x & X. In universal 
algebraic, or categorical terms, L is the free '^-algebra over X, and this property, freeness, 
determines L up to isomorphism of modal {j-algebras. Next, if we let L be L^tt ^^^(X), then 
an analogous property holds: L is the free regular '^-algebra over X. 

Returning to the proof sketch, we will underpin our completeness results algebraically by 
a representation theorem stating that 

Theorem 5.1. If X is countable, then L{X) embeds in a Kripke '^-algebra. 

We shall see that such a theorem holds if S = Kj"(r), so that L(X) is the free regular 
jj-algebra over X, or if S = Kj(r) is the standard Kozen-Park axiomatization and all the 
formulas in T are subject to some syntactic constraints. 

In both cases, such a result implies completeness as follows. Let X be the set of variables 
of a term/formula t. If the formula t is valid in every Kripke frame, then the equation 
t = T holds in every Kripke j:j-algebra, and thus certainly in the one that L(X) embeds into. 
Consequently, the equation t = T holds in the Lindenbaum algebra L(A"), and by our earlier 
observation that L incarnates the associated logic, this means that the formula T ^ t is a 
derivable theorem of the associated logic. As usual, this implies that h t is derivable as well, 
which establishes the completeness of the logic. 

In turn, the proof of Theorem 15.11 is subdivided in many steps, which we here collect into 
some main results, to be proved successively in the next two sections. 

1. First we show that the modal operators C'f^ of L are residuated (Corollarv I6.12p . 

2. Then we prove that L is constructive (Theorem 16. ISp . 

3. Finally, Theorem 17.11 states that every countable modal jl-algebra that has residuated 
modalities and constructive fixpoint connectives, can be embedded in a Kripke jj-algebra. 

Since L(X) is countable whenever X is countable. Theorem 15.11 follows immediately from this. 

The proof of Theorem 1 5 . 1 1 will be carried out almost in parallel for the two systems Kj(r) 
and K^(r). For the sake of readability, we shall give the details of the proof in the monomodal 
setting but discuss also in extent the steps that have to be taken to generalize the proof to 
the polymodal setting. 
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5.1 Completeness of the Kozen-Park axiomatization 

As we mentioned in the Introduction, in many cases the relatively simple Kozen axiomatiza- 
tion is already sound and complete with respect to the Kripke semantics. This applies to flat 
modal fixpoint languages in which each connective can be defined as the least fixpoint of 
a formula 7' which is untied with respect to x. This notion is closely related to those of the 
aconjunctive formulas of Kozen [19] and the disjunctive formulas of Walukiewicz ^0], but it 
is fine-tuned to the fact that we are focussing on the special role of the variable x. 

Definition 5.2. A modal V-formula 7(2;) E C\7{X) is untied in x if it can be obtained from 
the following grammar: 

(fi ::= X \ T \ ip y if \ Ip A /\ Vj^j 

Here ip is a formula in which x does not occur, J ^ I, and each is a set of x-untied 
formulas. 

Example 5.3. The key point of untied formulas in x is that we restrict the use of conjunctions 
to formulas of the form ip A Ajg j ^3^3 where x may not occur in ^, and no two V operators 
in may be indexed by the same atomic action. Thus, for instance, the formulas 

Vi{V2{p}} A Vi{x} and Vi{V2{x}} A V2{x} are untied in x, but the formula Vi{ V2{x}} A Vi{x} 
is not. For a slightly more elaborate example, the formula 

99:=(Vi{T,2;,Vi{T,x}} A V20) V(Vi{T,x,Vi{T,x}} A V2{Vi{x,T}}) (23) 

can be parsed by the above grammar and therefore is untied in x. 

We can now formulate the first result, returning to its proof at the end of this subsection. 

Theorem 5.4. Suppose that each 7(x) E F is untied with respect to x. Then the axiom 
system Kj(r) is sound and complete with respect to the Kripke semantics of C^{T). 

For readers that are not familiar with the cover modalities, we give a corollary of Theo- 
rem 15.41 that is phrased in terms of the classical presentation of modal logic using diamonds 
and boxes. We leave it for the reader to verify that this corollary covers fixpoint connectives 
[j^ indexed by a formula 7 in which x has exactly one, positive, occurrence. This takes care 
of for instance the computation tree logic, CTL. 

Definition 5.5. A modal formula 7(x) is harmless with respect to x if it can be obtained 
from the following grammar: 

ip ::= x\T\ip\/ip\ipAip \ Oup \ O^p [ j^pj . 

Here if) is a formula in which x does not occur, J I, and Aje J ^3 ^ harmless conjunction. 
This means that for each j E J, the conjunct pj is either of the form CHjX) or itself a 
conjunction of the form A^eL '^jXe (with x and each xe being harmless in x). 
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Example 5.6. The formula A O2X) is not harmless, and neither is Oix A The 

formula <>ix A OiOix A □2O1X is, on the other hand, harmless, and this also applies to 
Oix A OiOix A DiOip. 

Corollary 5.7. Let T be a set of modal formulas each of which is harmless with respect to x. 
Then the axiom system Kj(r) is sound and complete with respect to the Kripke semantics of 

Proof. A straightforward induction shows that every 7(x) which is harmless with respect 
to X, is equivalent to a V-formula that is untied in x. (For instance, the harmless formula 
Oix A O1O2X of Example 15.61 is equivalent to the untied formula ()23p .) Then the Corollary is 
immediate by Theorem 15.41 qed 

Proof of Theorem 15.41 The axiomatization Kn(r) certainly is sound. To argue about 
completeness, we need Theorem 15.11 for L the Lindenbaum algebra associated with K[j(r). 
We proceed along the path sketched above and, to this goal, the key observation is that if 7 
is untied in x, then for any vector of parameters v, the term function 7^ on the Lindenbaum- 
Tarski algebra L = h^^^^\X) is a finitary 0-adjoint. This implies that the least fixpoint 7^" 
is constructive, see Theorem 16.181 for more details of this argument. QED 

5.2 The general case 

We leave it as an open problem whether, in the general case, the system Kj(r) is complete. 
However, for its extension K^(r) we have the following uniform soundness and completeness 
result. 

Theorem 5.8. The axiom system K^(r) is sound and complete with respect to the Kripke 
semantics of C^{T). 

In the sequel we shall use the phrase "free regular ft-algebra" as a synonym of the Linden- 
baum algebra, and L, L(X) shall be short notation for L^tt ^'"^(X). 

Proof of Theorem 15.81 As we mentioned already in the previous section, the soundness 
of K^(r) follows from the main result of Arnold Sz Niwihski in [21 §9], here mentioned as 
Proposition 14.21 For, it is an immediate consequence of this result that all Kripke [J-algebras 
are regular. But from this and the fact that the Lindenbaum- Tarski algebra is the free regular 
(j-algebra, the soundness of K^(r) follows by a standard algebraic logic argument. 

To argue for completeness, we need Theorem 15. II for L the Lindenbaum algebra associated 
with Kj'(r). We proceed again along the path sketched above but this time the path is less 
direct. 

To argue that the least fixpoint of 7^ is constructive, we first observe that the least 
fixpoint of (T^)^ - which by regularity exists ~ is constructive, since (T+) is a simple system 
and its interpretation in L is a finitary 0-adjoint. Then, the property of constructiveness 
of the respective fixpoints can be transferred from (T^)^ to (T^)^ and from (T.y)l^ to 7^, 
using the results of Section HI A detailed account of this process will be given in the proof of 
Theorem 16.181 QED 
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6 Properties of the Lindenbaum Algebras 



The goal of this section is to prove that the Lindenbaum algebra L^, where S is one of the 
axiom systems Kn(r) and Kj(r), is constructive, cf. Definition l2.9l We shall obtain this result 
by subsequently analyzing properties of this algebra. 

6.1 Rigidness 

We start with showing that L is rigid with respect to X. 

Definition 6.1. Let ^4 be a modal algebra generated by a set X. A is rigid with respect to 
X if 

A Vy = _L implies /\G = ± or 3y eY s.t. y = ±, (24) 
where G and Y are finite, possibly empty, sets of elements of A, with G C {x, -ix | x € X}. 
Remark 6.2. In a polymodal setting we say that A is rigid with respect to X if 
/\G A /\ ViYi = ± implies f\G = ± ot 3i e I and y e Yi s.t. y = ±. 

Remark 6.3. To gather some intuitions about this property, we first prove rigidness of the 
free modal algebra M{X) generated by a set X of variables. Reformulating the property in 
terms of formulas, and reasoning by contraposition, it suffices to show that whenever A is a 
consistent set of X-literals, and $ = {fi, . . . , is a set of consistent modal formulas, then 
the formula f\A A V$ is consistent as well. 

So let A and $ be as indicated. Then by completeness there is a pointed Kripke model 
(Mj, Tj) for each formula (pi. Now create a new model M as follows. Take the disjoint union of 
the models Mi, . . . , M„, and add one single new point r. Let {ri, . . . , r„} be the successor set 
of r, and define a valuation for r so that the propositional formula /\A is true at r. Clearly 
then M, r Ih /\ A A V^", witnessing the consistency of the formula /\A A V$. 

Second, for readers that are familiar with the duality theory of modal algebras p8], the 
notion of rigidness has a very natural formulation in terms of the dual relational space A^, of A. 
Let ^4 be a modal algebra generated by some set X. Then A is rigid with respect to X iff for 
every finite set G C {x, -ix | x G X} such that /\ G > ±, and every finite set U = {ui, . . . , Un} 
of ultrafilters in A^,, there is an ultrafilter G which has U as its collection of successors. 

Theorem 6.4. Let L denote either the free modal \)f-algebra or the free regular modal '^-algebra. 
Then L is rigid with respect to X. 

The proof of the Theorem depends on the following construction. 

Definition 6.5. Let A be some modal algebra, and let H = {vr^ : A — > 2|0<£<n}be 
a finite (possibly empty) set of Boolean algebra homomorphisms. We define the operation 
<>^ : A — >2hy putting 

0^(0) :=\/{^(a) l^en}. (25) 
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We define the operation O : A x 2 — > A x 2 as follows: 

0^"(a, d) := (0^(a), 0^{a)) , (26) 
and let A^ be the algebra obtained by expanding the Boolean algebra Tlx 2 with this operation. 

For future reference we define the cover operation associated with as the map V'^ : 
Vuj^ — > 2 given by 

V^a:=a^\/ aA /\0^a, (27) 

where of course D^x = -lO^-ix. 

Remark 6.6. In a polymodal setting the construction has to be parameterized by a collection 
of the form {Ui \ i e I}. Then O^^ and O^" are defined from Xlj as in the equations (|25p 
and (f26l) . respectively. 

Remark 6.7. Again, a dual perspective on this construction may be illuminating. Recall that 
Boolean homomorphisms may be identified with ultrafilters. In a nutshell (and again, presup- 
posing familiarity with the duality theory of modal algebras), we obtain the dual structure 
of A^ by adding an ultrafilter u to the dual structure of ^, making the set 11 of Boolean 
homomorphisms/ultrafilters its successor set. 

It is not difficult to verify that the operation O"^^ is additive, so that A^ is a modal 
algebra. But in fact, as we will see in the Proposition below, the construction preserves many 
other properties as well. 

Proposition 6.8. Let A be a modal algebra, and let H = {tti : A — > 2\0<i<n}bea 
finite set of Boolean algebra homomorphisms. 

1. If A is a modal '^-algebra for some fixpoint connective tt^, then so is A^. 

2. Let T be a semi-simple modal system, and let v € A^ be some parameter for T. If 
has a least solution on A, then so does T^^y for each parameter w ^ 2^ . 

3. If A is regular with respect to some semi-simple modal system T, then so is A^. 

Proof. Since part 1 of the proposition is a direct consequence of part 2 and Proposition 14. 1^ 
we start with proving part 2. Let T = {Z, {t^ \ z S Z}) be a semi-simple system of equations. 
Since the carrier of A^ is the set ^ x 2, we may see as a 

map 

T^" : {A^ X A^) X (2^ x 2^) {A^ x 2^) . 

Let TTA and 112 denote the projections of A^ onto A and 2, respectively. 

Given the definition of the modal operator of A^, the first coordinate tta o T^^ of the 
map is identical to the map o tt^- Furthermore, since T is semi-simple, in each term 
tz the unguarded variables are all from P, while the guarded variables are all from Z, and 
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each occurrence of these is in the scope of exactly one modahty. As a consequence, the second 
coordinate of is the compose of 

{A^ X 2^) X (^^ X 2^) ^ X 2^ ^ 2^. 

Here T2 is best understood by observing that its terms are obtained from those of T by 
replacing every occurrence of the symbol V with the formal symbol V^. 

Summarizing, we may write T^^ = {T^ o tta,T2 o vr). It follows by Bekic' property that, 
for each v € and w G 2^ , the least fixpoint of T/^s exists, and can be written as 



(v,w) 



{l^iz.T^T^iiiz-Ttw)). 



(28) 



Part 3 also follows from part 2, but it needs more work. We first prove that the following 
diagram commutes, for every w G 2^: 




(29) 



Recall that in Section[3]we showed the diagram (jlip to commute because of Proposition [3TT^ 2) . 
A careful analysis of that proposition reveals that the only property needed for its proof is 
that the diamond O underlying the operation V (in the sense that Va = n\J a A /\ Oa with 
□a = -lO-ia) preserves finite joins. Now the operation underlying the operation V'^ of 
T2 also preserves finite joins, and so we prove that the diagram ()29p commutes in exactly the 
same manner. 

Now we establish the regularity of A^ as follows. First, it follows from part 2 of this propo- 
sition that for each v € A^ and w G 2^, the least fixpoint //y .(T"*")^"^^ exists. Moreover, we 
may calculate 



{v,w) 



/xy.(^+)^^+(/xy.(^+)^,H: 
^''{{^,z■T^,%{^^z.T^,w))) 



by m, 

since A is regular, 
since diagram ([29]) commutes, 



since L 



X i^, 



This finishes the proof of the third and final part of the proposition. 



again, by (pHj) . 



QED 



We can now prove the rigidness of L, on the basis of Proposition 16.81 and the fact that L 
is the free Jt-algebra over X. Moreover, part 3 of Proposition 16.81 ensures that the same proof 
works if L is the free regular (J-algebra over X. 
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Proof of Theorem 16.41 Suppose for contradiction that L is not rigid with respect to X. 
Then there is a finite set A of X-Hterals, and a finite subset a A such that /\ A > _L and 
6 > _L for all b £ a, while A ^ = _L. 

By the prime filter theorem, we may find a set 11 = {tti, : L — > 2 | 5 G q} of Boolean 
homomorphisms such that 7Tb{b) = T for all 6 E a. Now consider the algebra L^, and let 
/ : X — > be some map satisfying 

Clearly, such a map exists by the consistency of A, and since L is the free (regular) jl-algebra 
generated by X, f can be extended to a modal jj-homomorphism / from L to L'^. Then it 

follows from our assumption that /(/\ A A V a) = /(-L ) = -L • 
On the other hand, we claim that 

f{f\AAV^a) = {±,T), (31) 



which provides us with the desired contradiction. For the proof of (j3ip . using the fact that / 
is a homomorphism, we find 

7(/\ A A V^a) = 7(/\ A) A fiS/^a). 

From the assumption (|30p on /, and the fact that / is an extension of /, it follows that 
7(a) = (a, T) for all a in A, so that 7(A A) = A{7(a) | a G A} = (A A, T), while 7(V^a) = 
(V^a, V^a), where V'^ is the cover modality associated with O^, see (j27p . The point of the 
construction of L'^ is that 

V"a = T, (32) 

as we shall prove now. The relation (j32[) trivially holds if a is empty, since then O^x = _L 
for all X G A and so V^a = = -lO^T = T. So let us now assume that a is not empty. 
Then we compute 

n^y a = ^0^{ /\{^b \ b e a}) 

= - V^"(A{^H&Ga}) by (ESI) 

> -1 \y TTai^a) (vTa is monotone) 

> ^iTa{a) {iTa is a homomorphism) 
= -1 \/ -iT (by assumption on -Ka) 
= T 
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and 



V O^o = V ^"ft = VV ^ V ->'(b) = V T = T 

b£a b€a a&a b£a b£a 

SO that we find 

Vna = nn\/aA\/0"« = T, 
which proves ()32p . Continuing our computation of /(/\ A A V^a), we now have that 

7(/\ A A V^a) = (/\ A, T) A {V^a, T) = (/\ A A V^^a, T A T) = (±, T) . 
This finishes the proof of (|3ip . and thus, of the Theorem. qed 
Remark 6.9. In a polymodal setting, by the same sort of computations, we shall have 
7(/\ A A V^a) = (/\ A, T) A /\{Vi^a„ T) = (/\ A A V^^a, T A /\ T) = (±, T) . 

Thus, in presence of many modalities, a contradiction with the regularity of L is obtained in 
a similar way. 

6.2 Finitary 0-adjoints 

We now turn to the notion of a finitary 0-adjoint and to its generalization, that of a finitary 
family of 0-adjoints, see Definition 12.131 The use of these notions lies in an earlier result by 
the first author [35], which roughly states that fixpoints of finitary 0-adjoints, if existing, are 
constructive. In order to apply this result we aim to show that simple systems of equations 
on the Lindenbaum algebra give rise to finitary 0-adjoints. To reach this goal we only need 
L to be rigid with respect to X and to be generated by X. Therefore the next results apply 
both to the Lindenbaum algebra L^i'^'") and to the Lindenbaum algebra L^tt '^^\ 

Our first observation is that the cover modality on the Lindenbaum algebra is itself a 
finitary 0-adjoint. In order to turn this into a meaningful mathematical statement, we need 
to endow the domain Vu){^) of the operation with a quasi-order, see Remark 12. 121 Thus, 
let us define the relation < on VojiJ-) by saying that a </3 iff for all a G a there is a 5 G /3 
such that a <b, and for all 6 € /3 there is an a G a such that a <b. It is not hard to see that 
< is a quasi-order on 7^^(L). 

Theorem 6.10. Let L denote either the free modal '^-algebra or the free regular modal (]- 
algebra. Then each cover modality Vj"^ : Vuj{L) — > L is an 0-adjoint. 

Proof. Given an element d E L, we need to define a finite set G\j{d) G Vi^jV^jiJ-i) such that 
for all a £ 'P^(L), we have 

Va < d iff a</3 for some /? G Gv(d) . (33) 



33 



First we confine our attention to the so-called weakly irreducible elements of L, that is, 
the ones of the form 

Ynvo6v\/nc, (34) 

ceC 

where 11 is some set of X-literals, b is an clement of L, and C is a finite set of elements of L. 
For a weakly irreducible element d = \/ U V Ob y \/ Oc we let 

Gv(d) := G^{d) U G<^(d) U G°{d) , (35) 

where 

Gn^iy,^^ {m.e>} if vn=T, 

I otherwise, 

GO{d) :={{6,T}}, 

G°{d) :=U{{6Vc},0}. 

cec 

The correctness of this definition follows from the following Claim. 

Claim 1. Let d = yUV Oby \J^^^Uc be weakly irreducible. Then the following are 
equivalent, for any a G 7'(j(L): 

1. Va < d; 

2. (a) Vn = T, or 

(b) a <h for some a G a, or 

(c) \J a <h\J c iov some c G C; 

3. a<f3, for some f3 G Gy{d). 

Proof of Claim. (1 =^ 2) Reasoning by contraposition, we assume that (2) does not hold. 
Then (a') the set A := {-ivr | tt G 11} of literals is consistent, (b') -^^ A a > _L for every a £ a, 
and (c') -i6 A -ic A V « > -L for every c E C. Now consider the element 

e := /\A A V({^6 Aa \ a € a} U {^b A a\/ a \ c e C}) . 

It is immediate that e < /\ A, and easy to verify that e < AceC In addition, considering 
that 

e < n\J[{^bAa\aea}U{-^bA^cA\/a\ceC}) 
= 0(^6 A Y({a I a G a} U {^c A Ya I c G C})) 

we have e < Combining these observations, we find that e < -id. But it is also easily 

seen that e < Va. On the other hand, we may apply the rigidness of L to derive from (a')-(c') 
that e > _L. Prom this it follows that Va ^ d; that is, (1) fails, as required. 
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(2 ^ 1) In each of the cases (2a)-(2c) it is obvious that Vq < d. 

(2 =^ 3) Suppose that (2) holds, and distinguish cases, (a) If V n = T then both {T} and 
belong to G^{d). Then a < {T} if a 7^ 0, and a < if a = 0, so there is always some 
P € G\r{d) with a<l3. (b) If a < 6 for some a € a, then it is easy to see that a < {b, T}, and 
this suffices to prove (3) since in this case {b, T} belongs to Gv(c?)- (c) If Y a < 5 V c, with 
c & C, then a < {6 V c} if a 7^ and a < if a = 0. In both cases we have proved (3), since 
both and {b V c} belong to Gv(d)- 

(3 =^ 2) Assume that a</?, with /? G Gy{d), and again distinguish cases. If /5 € G^{d), 
then in particular G^{d) is nonempty; this can only be the case if YII = T, so (2a) holds. 
If /? G G^{d), then /3 = {6, T}, so from a</3 it follows that there is some a € a such that 
a < 5, so (2b) holds. Finally, if /? G G°{d), then G is not empty. If /? = 0, then a = 0. Let 
c G C be arbitray, then \/a = -L<b\/c. If /? = {6 V c} for some c G C, then from a < /3 we 
may deduce that a <by c for all a G a. This implies \J a <b\/ c. In both cases (2c) holds. < 

Finally, let d be an arbitrary element of L. It is not hard to show that d can be written as 
a finite meet d = ^£=1 n °^ weakly irreducible elements. Thus, in order to define G\/{d) 
for such a meet, it is enough to define Gv(T) and Gy{di Ad2) assuming that we have already 
defined Gy{di) and Gv(c^2)- We let 

Gv(T) = {{T},0}, (37) 

Gv{diAd2) = {{61 A 62 I (^1,^2) G Z} 1 3/?i G Gv{di),i = 1,2, and Z G /3i M /^a } . 

We leave it to the reader to verify that, with the above definition, Gv(T) satisfies (f33]l . For 
Gv(c?i A ^2) we argue as follows. If Va < di A d2 then, for i = 1,2, Va < di and a<Pi for 
some Pi G Gy{di). Define Z by putting (61,62) G Z iff there exists a G a such that a < 61 
and a < 62. Then Z € Pi :x\ P2 and a <{ 61 A 62 I (61, 62) G Z}. Conversely, if for i = 1,2, 
some /3j G Gy[di) and some Z G /3i ix] /?2, the relation a <{ 61 A 62 | (6i; 62) G Z } holds, then 
a < Pi, so that Va < di, i = 1, 2, and Va < di A (i2- QED 

Remark 6.11. In a polymodal setting the vectorial nabla V = AiG/ ^ 0-adjoint on the 
Lindenbaum algebra L. Recalling that : 7'tj(L)^ — ^ L, then we need to define G^j^((i) 

as a finite set of vectors (of finite subsets of L), that is, G^j_^{d) Tujil-'Y ■ To this aim, we 
proceed as before: we first define it on weakly irreducible elements and then we extend its 
definition to meets of weakly irreducible elements. Now, in a polymodal setting, d is weakly 
irreducible if it can be written as 

d = \/uy\/{Oibiy\/a,G^). 

For d weakly irreducible, we let 

G^^{d)=G''{d)u[jGi{d) 

where 

(3 G G^{d) iff Pi G G^{d) for alH G / , 

(3 G Giid) iff /3i G { { 6i, T } } U { { 6i V c} I c G CJ and G { { T }, } for / i , 
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where G^{d) is defined as in equation 

To see that this is a correct definition, it suffices to observe that V/3 < d ii (3 £ C!^^{d), 

and that, conversely, V^ct < d impUes the existence of some f3 G G^j^{d) such that Oj </?j 
for all i £ I. The first of these two observations is straightforward; the second follows from an 
analog to Claim 1 in the proof of Theorem I6.1UI stating that by the rigidness of L, V^ct < d 
implies one of the following three cases: (1) either \/n = T, or (2) there exists i £ I and 
a € Qj such that a < 6j , or (3) there exists z S / and c £ Ci such that \/ < biV c. 

To extend the definition of G^j^ to all elements of L, we let 

(3 G G^l(T) iff /3j G { { T }, } forah iel, 
P G G^j^idi A d2) iff 3fy E G^^{d,),j = 1,2, 

and Zi G Pj M /^^ s.t. /3i = { 6i A 62 | (61, ^2) ^ Z,} . 

We leave it for the reader to verify the correcteness of this definition along the ideas given for 
formulas (l37l). 



As an immediate corollary of Theorem 16.101 we obtain the following. 

Corollary 6.12. The Lindenbaum algebra L is residuated, that is, each operation of" : L — > 
L is a left adjoint. 

Proof. Recall that Ox = V{x, T} and observe that the correspondence { •, T } : L — > P^(L), 
sending xGLto{3;,T}G 'Pcj(L) is an 0-adjoint: We can define 



Gs. 



{•,T} 



{A"}, T G a, 
, otherwise , 



leaving it for the reader that this definition is indeed correct. As 0-adjoints compose, it 
follows from Theorem 16.101 that is an 0-adjoint. But then it must be a left adjoint since 
it preserves finite joins, see [35l Proposition 6.3]. QED 

Remark 6.13. In passing we note that the same results apply to the free modal algebra, 
which can be identified with the Lindenbaum- Tarski algebra of the basic (poly-)modal logic 
K. In particular, simplified versions of the proofs given here will show that the coalgebraic 
modality of the free modal algebra is an 0-adjoint. 

In order to prove the main result of this section, viz.. Proposition 16.171 dealing with 
constructiveness of simple systems of equations, we need to adapt the definition of the cover 
modality so that it has as its domain a product set of the form . Formally, for a finite set 
of variables Z, we introduce the operation : A^ — > A, defined by the formula 

Vz(^) = /\Ov,Aa\J V,. 

zez zez 

If y C Z, then we shall write Vy : A^ — > A for the compose Vy oyry, where vry : yl^ ^ 
denotes the obvious projection. 
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It is not difficult to see that V;^ = V'^oS'^, where S*^ : — > V^^{A) transforms a vector 
into a finite subset, S^{v) = {vz \ z ^ Z }. Now, is an 0-adjoint for every modal algebra 
A, since we can define 

Gsa{(3) = {v^ \ Re Ztxi/3}, with = /\{b e /3 \ zRb} . (38) 

The first part of the next Lemma is an immediate consequence of our previous observa- 
tions. The second part of the Lemma will be needed when arguing about constructiveness of 
a simple system of equations. 

Lemma 6.14. For every pair {Z,Y) with Z a finite set of variables Z and Y Q Z, the 
following holds: 

1. The vectorial cover modality Vy : — > L is an 0-adjoint on the Lindenbaum algebra 
L. 

2. Let d = „ dn, where each di is a weakly irreducible element of the form V V 
ObeW y OCe- If v e G^£{d) and z e Z , then is a conjunction of elements from the 

[Ji=i,...,n{ bijUib^y c\ceCe }. 

Proof. The first part of the Lemma is an immediate consequence of the facts that vTy , Sy, 
and V are all 0-adjoints, that 0-adjoints compose, and that = o o ir^: 

-L^ ^P^(L) ^L. 

For the second part of the Lemma we argue as follows. Let D be the set Uf=i ni^t}^ 
{b^y c j c G C^}. From the equations (f35]l and (f37|l we prove, by induction on n, that 
if a S Q € G^{/\di), then a is a (possibly empty) conjunction of elements from D. Then 
we use the formula that witnesses that 0-adjoints compose, Ggof{d) = UcGG/((i) ^gi^) ^"^^ 
the expressions for G and G j^. From equation ()38p it is immediately seen that if d G 

Sy '^Y 

G ^lj{d) and y (z Y, then Vy is a conjunction of elements from D. We leave it for the 
reader to determine an expression for G and to conclude that is a conjunction of elements 
from D if V e G^j^{d) and z e Z. qed 

On the basis of the results obtained until now, we can use Proposition 6.3 of ^35j to prove 
that, if T = (Z, { I z G Z }) is a simple system of equations, then : L^ — > is an 
0-adjoint, for each parameter v. However, our real goal is to argue that is a finitary 
0-adjoint and hence, by Proposition 12.141 that the least fixpoint fiz-T^ is constructive. To 
this goal, we shift the focus of our discussion from 0-adjoints to families of 0-adjoints. 

Definition 6.15. A modal algebra A is said to be V -finitary if any family of the form 

T = {ki AV^^ : A^ — > A\l=l,...,n} (39) 

is a finitary family of 0-adjoints - where Z is a finite set of variables and for each £ = 1, . . . , n 
Yf C Z and kp G A. 
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Proposition 6.16. The Lindenbaum algebra L is V -finitary. 



Proof. Let us define the Fischer-Ladner closure FL(ip) of a formula ip as the least set of 
formulas satisfying the following equations: 

FL{p) = {p} 
FL{^ip) = {^ip}UFL{ip) 
FL{^i A (^2) = { V^i A (^2 } U FL{ipi) U FL((^2) 
FL{Oip) = {Oip}UFL{ip) 
FL%{^)) = { } U FL(7(tJ^((^), ^)) . 

It is a standard argument to prove that FL{ip) is a finite set. 

Next, consider a family as in equation (j39p . We shall first argue that the family of 
0-adjoints 

JT' = { v|^^ : — >L\i = l,...,n}U{keA-:L — > L \ £ = I, . . . ,n} 

is finitary. To this goal, we fix an arbitrary formula (pQ and need to construct a finite set 

V such that [(/?o] G V and V is ^'-closed. We begin by fixing formulas fi, i = l,...,n, 
such that [ifi] = k£. Next we let y C L be the Boolean algebra generated by the set 
U^=o ni bP] \ ''P ^ FL{ipi) }. Clearly V is finite and contains [ipo]- In order to show that 

V is JF'-closed, we observe first that V is generated by the modal equivalence classes, i.e. 
equivalence classes [ip], where ip G U£=o n^-^i^f-) such that ijj = p is a propositional 
variable or ip = Oip' for some ip' G U£=o n FL(ipi). Hence, d (zV, then d is a conjunction 
of disjunctions of modal equivalence classes and their negations. Therefore d is a conjunction 
of weakly irreducible elements of the form \/ Ay Ob V VceC ^i^h { 6 } U C C y. 

We can now argue that V is .^-''-closed. If d G V, then write d as a conjunction of 
weakly irreducible elements dj of the form \/ Aj V Obj V \J ^t^c with {6j } U Cj C V. 
Then, by Lemma 16.141 \i z ^ Z and d G G ^(d), then G V, since is a conjunction 

of elements that belong to Uj{^i} U {6j V w | c G Cj }, so that i)^ G V. This shows 

that V is Vy^-closed. Similarly, since the map {k^ A •) is left adjoint to the map {-^k^ V •), 
GkiA-{d) = {^ki V d} = {-'[(/^^J y d} C V provided d & V. This shows that V is also 
{ki A -j-closed, and therefore we have established that J^' is a finitary family. 

Finally, since finitary families are closed under composition and a sub-family of a finitary 
family is a finitary family, see Proposition 12. 15^ we may deduce that T is itself a finitary 
family of 0-adjoints. QED 

Proposition 6.17. Let T = {Z,{tz\z G Z}) be a simple system of equations, let A be a 
V -finitary modal algebra, and let v be a set of parameters for T. Then fiz-T^, if existing, is 
constructive. 

Proof. Let T, A, and v be as stated, and recall that each (tz)^ is of the form V^gl ^ ^Y^- 
Since families of finitary 0-adjoints can be closed under joins, it follows from the assumptions 
that the family 

{{tf)^ -.A^ ^A\zeZ} 
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is a family of finitary 0-adjoints. Hence, by Proposition 12.15] is itself a finitary 0-adjoint, 
and hence its least fixpoint, if existing, is constructive by Proposition 12.141 qed 



As a specific example of Proposition 16.171 we see that on a regular jj-algebra, the modal 
system r+ is constructive. Together with the results in Section U this is the key to prove 
constructiveness of the least fixpoint {[7 itself. 

6.3 Constructiveness of L 

We have now gathered sufficient material to prove the main result of this section. 

Theorem 6.18. The Lindenhaum algebra L of the system K^(r) is constructive. If every 
J (zT is equivalent to an untied formula, then the Lindenhaum algebra L of the simpler system 
Kj(r) is constructive. 

Proof. For the first part of the statement we argue as follows. We have seen in Section [5] that 
L is the free regular modal jj-algebra. In particular L is regular and {T^)^ has a least fixpoint 
liz-{T^)v for each parameter v G l^^ . Since r+ is a simple system of equations, it follows 
from Proposition 16 .17] that each of these least fixpoints ^iz-{T^)v is constructive. But then it 
follows by successive applications of the Propositions 14.21 and 14.11 that all parametrized least 
fixpoints on L of and 7, respectively, are constructive as well. 

The second part is even simpler: L is, in this case, the free modal [j-algebra. Being 
rigid, the operations that can be constructed using substitution starting from V^, constants, 
conjunctions with constants, and disjunctions, are finitary 0-adjoints on L. If 7 G P - so that 
7 is untied - then 7^(x,p) is among these operations. Thus, 7p (x) is a finitary 0-adjoint 
and its least fixpoint is constructive. QED 

7 A representation theorem 

The aim of this section is to prove that every countable modal jj-algebra A in which each 
diamond modality is residuated, and each fixpoint connective is constructiuve, can be em- 
bedded in a Kripke (j-algebra (Theorem 17. II below) . Our proof method consists of building a 
representation for A via a step-by-step approximation process and can be seen as a version 
of more general game-based methods for building structures in model theory (see |161 [T5] for 
an overview). It has a long history in modal and algebraic logic, see [27 1 128 1 18] for some early 
references. 

Theorem 7.1. Let A be a countable modal '^-algebra. Assume that each jj^ is constructive on 
A, and that each O/^ is residuated. Then A can he embedded in a Kripke ^-algebra. 

Fix an algebra A as in Theorem 17.11 For simplicity we restrict attention to a language 
with a single diamond O, and a single fixpoint connective (1. We let 7(3;, p) denote the 
associated formula of fl, where p = {pi, . . . ,pn). We will say that a G ^ is nonzero if a 7^ _L. 
The main lemma in the proof of Theorem 17.11 is the following. 
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Lemma 7.2. For each nonzero a € A there is a Kripke frame Sa and a modal f^-homo- 
morphism pa ■ A ^ st such that Pa{o) > -L- 

The key notion involved in the step-by-step approximation process leading up to Lemma [7.2l 
is that of a network. Let cu* denote the set of finite sequences of natural numbers. We denote 
concatenation of such sequences by juxtaposition, and write e for the empty sequence. If 
t = sk for some A; G w we say that s is the parent of t and write either s = t~ or s <]t. A tree 
is a subset T of w* which is both downward and leftward closed; that is, if t 7^ e belongs to T, 
then so does t~ , and if sm G T then sk & T for all k < m. Obviously, a tree T, together with 
the relation <l, forms a Kripke frame; this frame will also be denoted as T, and its complex 
jj-algebra, as T^. 

An A-network is a pair = (T, L) such that T is a tree and L : T ^ T^iA) is some 
labelling. Such a network N induces a map r^ : A ^ V{T), given by 

rAr(a) := {t G T [ a G L(t)}. (40) 

The aim of the proof will be to construct, for an arbitrary nonzero a G A, a network = 
(T, L), with a G L(e), and such that r^r is a modal [|-homomorphism from A to TK We need 
some definitions. 

A network A^ = (T, L) is called locally coherent if /\ A > _L, whenever A is a finite subset 
of L{t) for some t £ T; modally coherent /\X AO /\Y > ±, for all s, t G T such that s <it 
and all finite subsets X and Y of respectively L{s) and L{t); and coherent if it satisfies both 
coherence conditions. A^ is prophetic if for every s G T, and for every Oa G L{s), there is a 
witness t such that s <\t and a G L{t)] decisive if either a G L{t) or -la G L(t), for every 
t £ T and a G j4; and constructive if, for every t £ T, and every sequence a in A such that 
(ja G L(t), there is a natural number n such that (7^)"(_L) G L(t). A network is perfect if it 
has all of the above properties. 

Lemma 7.3. If N is a perfect A-network, then r^^ : A — > is a modal ^-homomorphism 
from the modal ^-algebra A to the complex algebra of the Kripke model {T, <). 

Clearly, we shall have that rAr(a) 7^ for all a G A for which there is a t G T with a G L(t). 

Proof. Let A^ = (T, L) be a perfect network. It is fairly easy to derive from local coherence 
and decisiveness that each L{t) is an ultrafilter of (the Boolean reduct of) A. From this it is 
immediate that r/v is a Boolean homomorphism. 

In order to prove that r/v is a modal homomorphism, we need to show that 

rj\[{Oa) = {t £ T \ t <\ s ioT some s G r/v(a) } , (41) 

for all a G ^. The inclusion C holds because A^ is prophetic. For the opposite inclusion, 
assume that t<]s and a G L{s). Suppose for contradiction that t rAr(Oa), so that Oa L{t). 
Then by decisiveness, -lOa G L{t). This gives the desired contradiction with the assumed 
modal coherence of A^, so that indeed we may conclude that (j4ip holds. 

From this it follows that, for all sequences a G A"^, and all modal formula ip: 

^^\rN{a))=rN{ipHa)), (42) 
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where for a vector a = (ai, . . . ,a„) r/v(a) denotes - here and in the sequel - the vector 
(rAr(ai), . . . ,riv(a„)). 

In particular, for = 7, (j42|) implies that for all b: 

r^(tt^b) =m(7^(ti^6,fe)) =7'^*(r-7v(tt^b),m(&)). 

In other words, r/v(jj"^b) is a fixpoint of the map l'^^(i,y But we can also prove that r7v(tt^6) 
is the ^-approximation of d'^" (r/v(b)). To see why this is so, we start from the definition of 

m{fh) = {teT\^b(^L{t)}. (43) 

Since L{t) is an ultrafilter and the network T is (J-constructive, jjb G L(t) if and only if, for 
some n, (7^)"(±) e L(t), and hence 

TNifb) = U { * e T I (7,^)" (±) G L(t) } . (44) 

n<u) 

Recall that, by definition of r^, (7^)" (±) e L(t) if and only if t G r/v((7^)" (-L)). Moreover, 
a straightforward inductive proof, on the basis of ([12]) . will show that 

Hence equation ([H]) becomes 

n<a; 

But if r/v(tt'^b) is both a fixpoint of the map 7^'(5) o^*^ an ordinal approximation of 
tt'^('lv(&))) then it must be the least fixpoint of the map I'^^^py oi, equivalently, 

rN{fb) = f\TN{b)). 

Having shown that r/v is also a homomorphism with respect to [j, we have completed the proof 
of the Lemma. QED 

From the previous Lemma it follows that, in order to prove Lemma [7. 2 1, it suffices to construct 
a perfect network with a € L{e) for an arbitrary nonzero a G A. Our construction will 
be carried out in a step-by-step process, where at each stage we are dealing with a finite 
approximation of the final network. Since these approximations are not perfect themselves, 
they will suffer from certain defects. We will only be interested in those defects that can be 
repaired in the sense that the network can be extended to a bigger version that is lacking the 
defect. 

Formally we define a defect of a network N = {T, L) to be an object d of one of the 
following three kinds: 

1. d = {t,a,^), with t (zT and a £ A such that neither a nor -la belongs to L(t), 
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2. d = {t, a, O), with t £ T and a € A such that Oa G L{t), but there is no witness s such 
that t <] s and a € L{s), 

3. d = {t, a, (j), with t G T and a € A" such that fla G L{t), but there is no n G u; such 
that (7^)"(±) G L(t). 

These three types of defects witness a network's failure to be decisive, prophetic, and (t- 
constructive, respectively. 

In our proof we will construct a perfect network as a limit of coherent networks, one by 
one repairing the defects of the approximants. In order to guarantee the coherence of these 
approximants in the long run, we need them to satisfy a stronger, global version of coherency. 
To define this notion we extend the local labelling function L of the network to a global one, 
L. This global labelling gathers all relevant information concerning the network at one single 
node. Since N is finite, it is straightforward to define such a global labelling map for the root 
e of the tree: if we let 

A;(t) :=/\L(t)A/\OA;(s), 
t<s 

then the set A|(e) on its own collects all relevant information from the full network. The 
residuatedness of the modality O allows us to access the global information on the network at 
each of its nodes, not just at the root. The resulting labelling L : T — * A will considerably 
simplify the process of repairing defects. 

Turning to the technical details, for the definition of L we use the conjugate of O, which 
can be defined as the unique map ♦ : A — > A satisfying 

a A 06 > ± iff A 6 > ± , (45) 

for all a,b G A. This map exists by the fact that O is residuated; in fact, it is the Boolean 
dual of the residual (or right adjoint) of O. Using this operation we can define the global 
labelling L as follows: 

Ai(t)AAt(t), 
/\L{t)A/\OA^{s), 

r T iit = e, 

\ ♦(A|(t-) A A| _j(t")) otherwise, 

/\L{t)A /\ OA^{s). 

t>s, s^u 

The idea behind this definition is straightforward: for L{t), we start by collecting the local 
information /\L{t) and then move on to t's neighbors, both its predecessor (with A|(t)) and 
its successors (with A|(s)). The role of Aj^^_y is to ensure termination of the procedure, 
avoiding a loop between Af (t) and A| (n) when t <u. 

Alternatively, we can understand the formula for L{t) as follows. Given t G T, wc consider 
the unoriented tree T' which is obtained by forgetting the orientation of the edges of the form 



m := 

Ai(t) := 

A^t) := 
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u <v. Using a basic result in graph theory, we obtain a unique new orientation on T' by 
taking i as a new root. Observe that u ^ v imphes that either u < v or v <\ u. Then the 
formula for L{u) can be defined inductively on the basis of the new orientation, analogous to 
the definition of A^{u), with the proviso that the conjunct contributed by a ^-successor v is 
modalized by O if n < ii, and by ♦ if u <l u. More precisely: 

L{u) = /\ L{u) A l\ {OL{v) \ u->vhu<\v]^|\ \ u^vk,v<\u]. 

One of the key observations in the proof is the following claim. 
Lemma 7.4. Let N he a finite network. Then L{s) > _L iff L{t) > _L, for any s,t £ N. 

Proof. It clearly suffices to prove the following special case: 

L{t) > ± iff L{t-) > ±, (46) 
for an arbitrary t ^ e. But it is straightforward to derive from the definitions that 

Z(t-) = A|(t-) A A|,_t(t-) A OA|(t), 

and 

L(t) = f(At(t-)AAi,_i(t-))AAi(t). 

Hence, (fl6l) follows from the conjugacy of O and ♦: simply take a = A|(t^) A Aj^__((t^) and 
b = A|(t) in (gi]). QED 

Call a finite network N = (T, L) globally coherent if L{t) > _L for all t (z T. We can now prove 
our repair lemma. We say that A'^' extends N, notation: N < N', if T C T' and L{t) C L'{t) 
for every t £ T. 

Lemma 7.5 (Repair Lemma). Let N = {T,L) be a globally coherent A-network. Then for 
any defect d of N there is a globally coherent extension N"^ of N which lacks the defect d. 

Proof. We will take action depending on the type of the defect d. In each case we will make 
heavily use of the global extension L oi L. 

1. li d = {t, a, -i) is a defect of the first kind, then we define A^'^ := (T, L'^), where L'^{s) := 
L{s) for s t, while we put 



L\t) :- 



L{t)U{a} ifL^(t)Aa>±, 
L{t)U{^a} if L^(t) A^a > ±. 



Then clearly the triple (t, a, -■) is no longer a defect, and so all that is left to show is 
the global coherence of N'^. But since L^ (t) > _L by assumption, we will have either 
L^{t) A a > _L or L^ (t) A > _L. It is easy to check that in either case, we have 
L^'^t) = L^(t) A X with X G {a, -<a}, and from this coherence follows easily. 
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2. Now suppose that d = {t, a, O) is a type 2 defect. Let k be the least number such that 
tk T, and define iV^ := {T'^,L'^), where = T U {t/c}, and L"^ is given by putting 
L'^{s) := L{s) for s ^ while L'^{tk) := {a}. In this case it is easy to prove that 
L'^'' (t) = L^{t), so A^'^ is certainly globally coherent. It is likewise simple to see that 
{t, a, O) is no longer a defect of N. 

3. Finally, suppose that d = {t, a, jj) is a defect of the third kind. By global coherency 
we have that {t) > -L. Suppose for contradiction that {t) A (7^)"(_L) = _L for all 
numbers n. Then for all n we have (7^)"(_L) < -iL'^ {t), and so by constructiveness of 
jj on A it follows that jj'^a < -^L^{t). But this contradicts the fact that N is coherent. 

It follows that L^{t) A (7^)"(-L) > -L for some natural number n. Now proceed as in 
the first case, defining L^(t) := L{t) U {(7^)"(±)}. 

QED 

Lemma 7.6. Every globally coherent A-network can be extended to a perfect network. 

Proof. We will define a sequence of networks N = Nq < Ni < N2 < . . . such that for each 
i G uj and each defect d of Ni there is a j > i such that d is not a defect of Nj . 
For the details of this construction, define 

D -.= 10* X Ax {^, 0} U a;* X ^" X {jj}. 

Informally we shall say that D is the set of potential defects. Clearly, since D is countable, 
we may assume the existence of an enumeration {dn)n<u) such that every element of D occurs 
infinitely often. 



Now we set 



Nf^ if di is actually a defect of A'', 
Nj otherwise . 



Finally, define A^' := (T',L'), with T' := [j^^^Ti and, for each t G T', L'{t) := [ji<c^Li{t). It 
is then straightforward to verify that A^' is a perfect extension of A^. For instance, suppose 
for contradiction that A^' would have some defect d. It readily follows from the definitions 
that there must be some approximation A^^ in the sequence for which d is also a defect. But 
then the next time i such that d = di, this defect will be repaired. As a consequence, d is 
not a defect of A'^^.+i, and so it cannot be a defect of A^' either. This provides the desired 
contradiction. qed 

Proof of Lemma 17. 2L Consider an arbitrary nonzero element a € A, and let Na be the 

network {{e},La), La given by La{e) := {a}. It is obvious that Na is globally coherent, so 
Lemma 17.21 follows by a direct application of the Lemmas 17.61 and 17. 3i QED 

Proof of Theorem 17. 11 Let S be the disjoint union of the family {5a | _L 7^ a € ^ }, where 
for each nonzero a £ A, Sa is given by Lemma 17.21 It is straightforward to verify that A can 
be embedded into the product HaT^x ^^^^ ^^^^ latter product is isomorphic to S'^, the 

complex tt-algebra of S. QED 
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